3 ms·

You'd think that the software would sit in a kind of sandbox so that it couldn't nuke the whole device but only itself. It's crazy that this is possible.

• echoangle 2y ago
  The software basically works as a kernel module as far as I understand, I don’t think there’s a good way to separate that from the OS while still allowing it to have the capabilities it needs to have to surveil all other processes.
  • temac 2y ago
    Something like ebpf.
  • layer8 2y ago
    And even then, you wouldn’t want the system to continue running if the security software crashes. Such a crash might indicate a successful security breach.