4 ms·
Not sure how you'll feel about the EndpointSecurity user-space framework, specifically designed to provide replacement functionality for anti-malware vendors (h
by highlandinfo 7y ago
Not sure how you'll feel about the EndpointSecurity user-space framework, specifically designed to provide replacement functionality for anti-malware vendors (https://developer.apple.com/documentation/endpointsecurity https://developer.apple.com/documentation/endpointsecurity)...
- floatingatoll 7y agoThat sounds a lot less fragile than patching the kernel directly.
- anaisbetts 7y agoSending every I/O operation through userspace and back again is going to be _glacially_ slow, good luck macOS
- duskwuff 7y agoA lot of existing antivirus software was already doing that -- and yes, it was glacially slow. But at least doing this through a first-party interface means it probably won't block the rest of the system quite as badly.