3 ms·
Wrong, eBPF is way, way worse. At the very least, Linux kernel has signed driver modules.
by egberts1 4y ago
Wrong, eBPF is way, way worse.
At the very least, Linux kernel has signed driver modules.
- mdaverde 4y agoCan you explain why you consider it to be worse? eBPF is also working on signed programs [0] [0] https://lwn.net/Articles/853489/ https://lwn.net/Articles/853489/
- egberts1 4y agoeBPF has a way to go before it is secured enough. One should not use eBPF in production machines (along with many other things that uses the mixed write-execute memory regions such as web browsers with JavaScript enabled).