3 ms·
> “The document states that Microsoft is obligated to make available its APIs in its Windows Client and Server operating systems that are used by its security p
by gjsman-1000 2y ago
> “The document states that Microsoft is obligated to make available its APIs in its Windows Client and Server operating systems that are used by its security products to third-party security software makers.”
Which means, if Microsoft had made a more carefully scoped way of extending the kernel, or even avoided extending the kernel at all for their own security products, they would have perfectly been at liberty to demand it for everyone else.
- BLKNSLVR 2y ago"Current Microsoft points finger at Past Microsoft for ..." Isn't a headline that will ever exist, therefore they'll point fingers at any entity (EU being the most recent) that's making them do things they don't want to do in order to further an unrelated agenda. Let no catastrophe go unexploited, as they say.
- mikeocool 2y agoYeah — not to be an Apple fan boy or anything, but it appears in this case Apple did exactly that: https://support.apple.com/guide/deployment/system-and-kernel-extensions-in-macos-depa5fb8376f/web https://support.apple.com/guide/deployment/system-and-kernel... And made APIs available specifically for user-space EDR: https://developer.apple.com/documentation/endpointsecurity https://developer.apple.com/documentation/endpointsecurity
- zokier 2y agoMicrosoft also has userspace APIs available, such as AMSI https://learn.microsoft.com/en-us/windows/win32/amsi/antimalware-scan-interface-portal https://learn.microsoft.com/en-us/windows/win32/amsi/antimal...
- Dwedit 2y agoSwitching from kernelspace to userspace on every file access would eat up so much performance it would be ridiculous.
- otterley 2y agoMacOS does it nowadays for endpoint protection and it works well enough. https://developer.apple.com/documentation/endpointsecurity https://developer.apple.com/documentation/endpointsecurity