4 ms·

They can do right now. Both the API and ABI are very rarely (read never but very problematic bugs or similar) broken in a backwards way.

• masklinn 8y ago
  That's my point. It's only possible with Linux because Linux provides a stable kernel ABI. You can't impersonate Windows or OSX the same way.
  • int0x80 8y ago
    Ahh sorry, I understood the other way around :)
  • int_19h 8y ago
    But you can impersonate Windows by providing your own implementation of the Kernel32 API. What's the essential difference between that, and emulating syscall API?