News: 1758535212

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Linux has the lineage to out-evolve the deadliest of cyber threats, given the right push

(2025/09/22)


Opinion The IT industry is not only full of sharks, it has shark nature itself. It must keep moving forward to survive. Not all sharks are obligate ram ventilators, and not all IT changes all the time, but without innovation the sector would curdle and die.

Venture capitalists and cash-rich tech companies feel this most keenly, which is why they swarm like makos to the bleeding edge. But innovation itself is not enough. Blockchain is very clever, but has made the world a nastier place while losing a lot of people a lot of money. AI’s trajectory from wait-and-see could just as easily go that way as any other. Actual change, innovation that sticks around and becomes part of a better way forward, doesn’t have to and really should not make its inventors billionaires. It is thus often invisible when leadership is measured in dollars. Nonetheless, it matters to billions.

A much more fruitful filter for the future can be stolen from nature. Evolution by selection and descent, the theory of everything for biology, is at once a living demonstration of successful innovation and a morbid library of its failures. It is both tautologically simple — survival of the fittest — and breathtakingly complex in the interplay of environmental factors, selection pressures, and the interplay of change and stasis. It’s not random mutation until something clicks, it’s if and how organisms can change to match a changing environment. In IT, it’s what makes best use of a change in the landscape, which itself is changing as new tech is taken up.

Fork that: Three alternative kernels show devs don't need Linux [1]READ MORE

To analyze this, selection pressures are particularly useful. Take a look at what’s going on in and around the peculiar speciation in and around the Linux kernel. There are clearly pressures here from the changing environment outside it. New and updated CPU architectures, evolving models of security, performance expectation in different use cases as sectors rise and fall in importance. Energy efficiency in many different ways. All are pushes for change across the kernel.

Other factors are more subtle and with very different dynamics. The commercial and personal motivations to be involved, the talent pool available to power change vectors, the power exchange between closed and open, the accuracy of perception and the anatomy of persuasion. These are as much social as technical.

[2]

Apply this model of selection pressures to our overview of three microkernels in the Linux context, and you can see that viable mutations are generally Rustafarian - personal motivation and skill sets are changing in that direction. Rust has itself evolved in response to those selection pressures, so selection pressure will favor those entities that can evolve to embrace it more easily. Mainstream Linux, with its very high institutional inertia about maintainers, leaves opportunities to the smaller, more nimble. All of the microkernels here have different focuses, different priorities, and the art of predicting their future success is in matching each focus to the imperatives of reality.

[3]

[4]

What will really make a difference is when an architectural concept offers a path to exploit an environmental aspect that’s unavailable to, or even toxic for, existing creatures. The evolution of photosynthesis produced unprecedented energy for cyanobacteria, while producing atmospheric oxygen that was poison for many other species. The evolution of metabolisms to use that oxygen completed the [5]planetary reset event , and there was all those tasty cyanobacteria to eat.

The equivalent in IT is fixing security, which is currently so toxic that in the UK, there is talk of Covid-level responses to [6]keep entire supply chains alive following a single incident. Information theft, system infiltration, and ransomware are increasingly seen as unavoidable, with corporate fatalism tending towards survivalism. That’s not tenable in an increasingly antagonistic world. Microkernels may not seem to have much to do with ransomware, but take a step back and ask at what point mutation could lead to an inherently resilient data processing environment.

[7]

Nature uses diversity and redundancy to enhance resiliency, at all levels from ecosystem to immune system. Imagine those as primary design features of the stack - or stacks. In avionics and other safety critical systems, diversity and redundancy means parallel independent systems performing the same tasks in different ways while cross-checking each other. Building a microkernel that supported the low-level system aspects of that while also doing the primary tasks of functional IT sounds like a very worthwhile experiment.

[8]The plan for Linux after Torvalds has a kernel of truth: There isn't one

[9]Windows 11 is a minefield of micro-aggressions in the shipping lane of progress

[10]Torvalds' typing taste test touches tactile tragedy

[11]Time to make C the COBOL of this century

[12]Upgrading Linux with Rust looks like a new challenge. It's one of our oldest

Doing another that runs on different hardware would also be important. These can start as only open source can, as step modifications of existing code and ideas, building tiny proof of concepts into running systems and encouraging others to start on their own paths.

Nature has created and tested billions of years of evolution, and what magnificence has appeared. But we have goals and a sense of purpose, entirely lacking in natural selection. Artificial selection can achieve in years what may never happen naturally. We can use the same tools as nature but to build towards what we need.

We absolutely do not need [13]$300 billion fantasy AI megaclouds in pursuit of making the world's first half-trillionaire. We absolutely do not need an IT infrastructure so shaky that a handful of god knows who can wreck sectors at will.

Understanding the big picture behind the little evolutions in open source can get us where we need to be. Evolved to live on dry land, away from the sharks. All of them. ®

Get our [14]Tech Resources



[1] https://www.theregister.com/2025/09/12/three_new_microkernels/

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2aNFylQvOs6IAlaXsZCca-gAAABc&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aNFylQvOs6IAlaXsZCca-gAAABc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aNFylQvOs6IAlaXsZCca-gAAABc&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[5] https://www.lboro.ac.uk/media-centre/press-releases/2023/october/cyanobacteria-formation-explained-marco-mazza/

[6] https://www.theregister.com/2025/09/15/covidstyle_furlough_schemes_for_jlr/

[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aNFylQvOs6IAlaXsZCca-gAAABc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[8] https://www.theregister.com/2025/08/14/the_plan_for_linux_after/

[9] https://www.theregister.com/2025/07/28/windows_11_is_a_minefield/

[10] https://www.theregister.com/2025/05/20/torvalds_typing_taste_test_touches/

[11] https://www.theregister.com/2025/02/18/c_opinion/

[12] https://www.theregister.com/2024/09/09/opinion_column_rust_linux/

[13] https://www.theregister.com/2025/09/15/oracle_spending_shares_opinion/

[14] https://whitepapers.theregister.com/



Sharks are a part of evolution

steelpillow

The need to constantly move forward is the classic driver of economic theory. We all know that boom times are better than recessions. "Drill, baby, drill!"

But to differentiate that from Darwinian evolution is naive. Big Biz and venture capitalists always prefer a safer bet, but it's only the evolutionary breakthroughs, born of the occasional high-risk speculation, that grab the headlines. So it goes in nature: the Cambrian explosion, the rise of the dinosaurs, the spread of grasslands, the spread of Hom Sap, all have been driven by revolutionary evolutionary events. And Linux does experience its own revolutions: Android was one, ARMLinux and SystemD are among today's. What you see as a revolution and what you see as evolution are just your perceptions of scale.

Sharks are just an aspect of that evolution, constantly probing for those opportunities to get ahead: the necessary replication and variation before natural selection can step in. You want to evolve, to move forwards. Then you will get sharks swimming around, some are actually beneficial: think Darl McBride, Mark Shuttleworth, Google, Lennart Poettering. Which are good for Linux and which bad? Please discuss elsewhere!

Sharks are only bad when their bite hurts. Sometimes it cleanses. Often it does both.

Re: Sharks are a part of evolution

Claude Yeller

Indeed, the real problem of IT& Venture Capital is the monoculture resulting from the winner takes all network effects.

Monocultures are inherently dangerous and will collapse without growing expenditure on protecting it.

The massive efforts of, eg, MS in protecting it's stranglehold on corporate desktops are resources that could have been spend on better, safer, and more user friendly software. Innovation thrives whenever MS loses control over a section of IT (remember the stagnation due to IE?).

Of all the sectors of IT, Open Source leads to the most competition and diversity. Android and Mac OSX are both built on Open Source. Everything, from the smallest to the largest computers run open source software.

Where things go massively wrong is whenever all eggs are put in a single basket, be it a single OS version, application, chip architecture, service provider, or data center.

Re: Sharks are a part of evolution

retiredFool

Monoculture and monopolies share much. Capitalism will almost always (maybe even always) end there. It is the most efficient for profit. It is government that has to force multiple strands. Corp's have all but abandoned research. Why would they spend money on research, profit is not guaranteed. And now it appears as if the USGov has turned into a biz and is cancelling research funds en mass. I don't see a bright future for innovation in the US.

Be careful...

DarkwavePunk

I understand the concepts that are being being conveyed in this article - but do be careful when trying to use analogies with evolutionary biology and technology. It might lead to misconceptions about both.

Re: Be careful...

Nate Amsden

I was thinking be careful and don't make people think they won't get ransomware if they change to a different kernel design. May get marginal security benefits but end of the day of course the kernel is rarely the avenue of exploitation.

I thought windows was microkernel based but turns out apparently it is a hybrid kernel so has some microkernel properties but of course systems running windows get compromised on a regular basis.

Wot!

Will Godfrey

Acres of verbage with very little information.

Looks like A ctual I diocy to me.

Re: Wot!

Adair

Sad to say I tend to agree, not a lot of actual substance here, and really nothing that hasn't been pitched many times before—all fodder for an LLM to regurgitate.

LLM regurgitate?

elDog

Then that would probably be the third time this verbiage has been processed through that digestive track....

Re: LLM regurgitate?

David 132

Tract. Not track.

(Takes Pedant hat off)

About Jaguar Land Rover And Tata Consultants...................

Anonymous Coward

Quote: "...Nature uses diversity and redundancy to enhance resiliency..."

But Tata Consultancy clearly disagrees!!!! See:

- Link: https://www.theguardian.com/business/2025/sep/20/jaguar-land-rover-hack-factories-cybersecurity-jlr

- Quote: "...Being a carmaker where ‘everything is connected’ has left JLR unable to isolate its plants or functions..."

- Quote: "...The fact that “everything is connected” in JLR’s systems appears to have become a vulnerability...."

Yup...Tata clearly disagrees about "diversity and redundancy"....................

.............and we see where that leads!!!

In Detail ?

fg_swe

Did they run a zero-trust policy in their network ?

Was it properly compartmentalized ?

Or was it sufficient to penetrate a single PC/server of the intranet ?

Did they have proper firewalling of DB servers and similar ?

Still waiting for a working microkernel

Gene Cash

GNU has been working on HURD for how long? Since 1990? and it looks like it was abandoned in 2010?

And "it's not a microkernel" was literally the first criticism aimed at Linux by Tannenbaum. In 1992.

So this is not "evolutionary"

Was this written by AI ?

Anonymous Coward

Because it's not really making sense.

Cyber Defense, Industrial Policy

fg_swe

Commercial IT systems are indeed still very weak. They are often developed using sub-standard methods such as informal+weak scanners, parsers and validators. This opens the castle to SQL and command shell injection attacks. Serialization has proven to be cheap+dangerous. Too many self-trained developers don’t know these basic computer science concepts, neither can they devise a proper syntax+grammar to the IT problem at hand.

https://di-fg.de/RobusteSoftware.html

Too often memory safety is not used due to inertia; it causes 70% of CVE exploits.

Microsoft had a memory-safe kernel in their R+D labs, but never made it a commercial product. It would have undermined the “secure Windows kernel” messaging…

The government needs to step up regulation to defend major industrial players. Red-teaming will also help to identify and plug dangerous weaknesses in industrial networks.

Government also needs to help out JLR, the same way they help out the bankers. What’s good for the financier is also good for the auto worker !

Alternatively, bow down to the Factory Of The World and lose the next conflict.

Real programmers don't draw flowcharts. Flowcharts are, after all, the
illiterate's form of documentation. Cavemen drew flowcharts; look how
much good it did them.