4 ms·
Security is more important. And dTrace implements a full stack, from kernel, user space to apps. eBPF is an Linux-only insecure island, they can keep.
by rurban 4y ago
Security is more important. And dTrace implements a full stack, from kernel, user space to apps.
eBPF is an Linux-only insecure island, they can keep.
- cryptonector 4y agoEh, a bytecode like DTrace's, or eBPF, can be safe. The original BPF certainly was (IIRC).
- rurban 4y agoNot if you allow user arrays in the kernel. dTrace doesn't, even when they didn't know about Spectre beforehand.