Microsoft's 'Orleans' cloud programming model gets a Halo test drive
Whenever anyone from Microsoft describes a Microsoft Research
project, there's almost always a disclaimer -- specifically, "There's no
guarantee when and if this technology will ever see the commercial
light of day."
Given that caveat, it's interesting when a Microsoft Research project
takes a step forward. Recently, that seems to have happened with
"Orleans," a cloud-programming model I last blogged about back in 2010.
When perusing the end-of-year research roundups, I found this
interesting tidbit buried in the eXtreme Computing Group's list of
accomplishments for 2012: "The cloud-systems team celebrated a year of successful
deployment of its distributed cloud technology—Orleans—in production for
Microsoft’s Halo team, and the team has scaled its system very
significantly since then."
That's one pretty impressive proof-of-concept demo.
Orleans, as Microsoft officials themselves have described it, "offers
a simple programming model build around grains, a unit of computation
with private and shared state that communicates exclusively by sending
messages to other grains and receiving and replying to requests from
clients. Combined with the Orleans runtime, which provides functionality
commonly used in this type of system, Orleans raises the level of
abstraction and helps developers build scalable correct Cloud
applications."
The (non-fiscal) Cliff Notes version: On the run-time front, Orleans
is to Windows Azure approximately as the Common Language Runtime (CLR)
is to Windows.
As the Microsoft researchers note on their page about Orleans: "Orleans provides direct support for the .NET programming model. We use standard .NET languages with custom attributes (currently C# is supported; we are working on F#)."
Summary:
Remember Microsoft Research's Orleans cloud-programming project? The
Halo team at Microsoft does.There's still no word as to when or how the eXtreme Computing Group
will bring Orleans to market. Will it be internally used infrastructure
only? Or will it be made available to any/all Windows Azure customers
at some point? Stay tuned....
Two vulnerabilities discovered and patched over the summer expose Jenkins servers to mass exploitation. Thousands, if not more, Jenkins servers are vulnerable to data theft, takeover, and cryptocurrency mining attacks. This is because hackers can exploit two vulnerabilities to gain admin rights or log in using invalid credentials on these servers. Both vulnerabilities were discovered by security researchers from CyberArk , were privately reported to the Jenkins team, and received fixes over the summer. But despite patches for both issues, there are still thousands of Jenkins servers available online Jenkins is a web application for continuous integration built in Java that allows development teams to run automated tests and commands on code repositories based on test results, and even automate the process of deploying new code to production servers. Jenkins is a popular component in many companies' IT infrastructure and these servers are very popular with both f...
Firefox will block automatic downloads initiated from sandboxed iframes -- the technology usually used for web embeds. Mozilla will add a new security feature to Firefox in October that will make it harder for malicious web pages to initiate automatic downloads and plant malware-laced files on a user's computer. Called a drive-by download , this type of attack has been around for two decades and usually takes place when users visit a website that contains malicious code placed there by an attacker. The role of the malicious code is to abuse legitimate features in browsers and web standards to initiate an automatic file download or download prompt, in the hopes of tricking the user into running a malicious file. There are multiple forms of drive-by downloads, depending on the browser feature attackers decide to use. Browsers like Chrome , Firefox , and Internet Explorer have, across the years, gradually deployed various forms of protections against automatic driv...
Summary: The security release fixes three flaws in the content management system. WordPress has patched three security flaws including a cross-site scripting (XSS) vulnerability and SQL injection problem which could lead to the creation of new vulnerabilities. The first bug, reported by David Herrera of Alley Interactive, is an information disclosure vulnerability which reveals the user interface for assigning taxonomy terms in the "Press This" function -- used to publish posts through browsers -- to users that do not have permission to see it.Last week, the content management system's (CMS) developers said in a security advisory that the new fixes resolve three important security issues, all of which impact WordPress versions 4.7.1 and earlier. The second issue was discovered in the WP_Query process, used to access variables and functions in the WordPress core, by researcher Mo Jangda. When passing data seemed "unsafe," the system became vulnerable ...
Comments
Post a Comment