4 ms·

The software basically works as a kernel module as far as I understand, I don’t think there’s a good way to separate that from the OS while still allowing it to

The software basically works as a kernel module as far as I understand, I don’t think there’s a good way to separate that from the OS while still allowing it to have the capabilities it needs to have to surveil all other processes.

temac 2y ago
Something like ebpf.
layer8 2y ago
And even then, you wouldn’t want the system to continue running if the security software crashes. Such a crash might indicate a successful security breach.