4 ms·
Not sure why it mentions or needs eBPF or anything kernel-side; this is already possible with just OpenSSL/etc. shim libraries.
by userbinator 2y ago
Not sure why it mentions or needs eBPF or anything kernel-side; this is already possible with just OpenSSL/etc. shim libraries.
- Brybry 2y agoAren't there cases where shim libraries/LD_PRELOAD won't work, like statically linked binaries? So if this works there it might be useful in, for example, analyzing encrypted video traffic for some video games.
- ranger_danger 2y agoYou don't have to modify or restart any applications, it works globally and at runtime without interrupting existing processes.
- deleted 2y ago[deleted]
- Retr0id 2y agoThey mention golang, which uses static binaries, meaning you can't LD_PRELOAD it.