4 ms·
In theory the parsing could run at a low privilege level subprocess. Root/admin is only needed to get the bytes.
by mackman 3mo ago
In theory the parsing could run at a low privilege level subprocess. Root/admin is only needed to get the bytes.
- tatersolid 3mo agoThat’s generally too slow though; these things run in kernel space as they scan every I/O stream. Context switching and memory copies would kill performance.
- formerly_proven 3mo agohttps://i.imgur.com/t5jDXrt.png https://i.imgur.com/t5jDXrt.png "Why don't we unpack malware in the kernel" - "And so the search for intelligent life continues..."