From 746165ce29e4b634896e5e66c292038509de7022 Mon Sep 17 00:00:00 2001 From: linse Date: Sat, 16 Sep 2017 14:24:22 -0400 Subject: [PATCH] Technology: Intro update --- Technology | 19 +++++-------------- 1 file changed, 5 insertions(+), 14 deletions(-) diff --git a/Technology b/Technology index d351c66..9d08f41 100644 --- a/Technology +++ b/Technology @@ -8,22 +8,13 @@ We develop digital infrastructure with a minimal footprint. Where other approac try to patch general purpose operating systems by adding more layers of indirection, we strive to build a secure system from the ground up. -Each piece of digital infrastructure or service is (a) written in a high-level -memory-safe programming language and (b) specialised to only contain the -required functionality at compilation time. This (a) reduces the attack vectors -and (b) also reduces the attack surface. +Each piece of digital infrastructure or service is written in a high-level +memory-safe programming language and tailored to only contain the +required functionality at compilation time. This reduces the attack vectors +and the attack surface. The resulting service is executed as a virtual machine on a modern hypervisor. -Its size is usually two orders of magnitude smaller (ranging from kilobytes to -16 megabytes) than a UNIX / Linux system, and boots within milliseconds. - -We program in [OCaml](https://ocaml.org), a multi-paradigm -programming language, which unifies functional, imperative, and object-oriented -programming. OCaml has an expressive static type system with type inference. -Developers can specify complex invariants in the type system, which are -checked at compile time, and violations are caught early. - -We discuss more reasons why we use OCaml [further down](#Why-OCaml). +Its size is usually around 1-10 MB, much smaller than a UNIX / Linux system, and boots within milliseconds. ## MirageOS - bespoke operating systems