3 ms·
Can you elaborate on that?
by cassianoleal 6mo ago
Can you elaborate on that?
- atgreen 6mo agoHave a look at https://github.com/atgreen/rhel-block-copyfail https://github.com/atgreen/rhel-block-copyfail
- cassianoleal 6mo agoThanks! From the sound of it, the same mitigations for Copy Fail 1 are also effective here.
- atgreen 6mo agoNo, they are different. I just bundled them together for convenience in this POC. The only real thing in common is that they both use eBPF.
- cassianoleal 6mo agoGot it, thanks!
- JeremyNT 6mo agoI was aware of commercial antivirus vendors (Crowdstrike) doing something like this, but this is the first I've seen it published by somebody in the open! Have you considered writing up a blog post and submitting this to HN?