Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Are you saying that they should prevent or limit the ability of their users from installing third party software? Or at the very least prevent it from running in kernel mode?


A more reasonable claim would be that microsoft should have a way to allow virus-scanners to run without needing to be able to crash the kernel.

That isn't an easy thing to do, but it should be possible.


I don't think that is possible. How can an anti-virus not in kernel mode defend against viruses running in kernel mode then?


Ebpf can, I believe, not crash the Kernel




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: