News for hackers. Stuff that matters.
Re:The CrowdStrike Failure Was a Warning by WorldMaker on Monday July 22, 2024 @05:25PM (#41039987)
> until eBPF for Windows is done

Red Hat says CrowdStrike themselves have sent out eBPF files that have caused all sorts of kernel panics. Any sufficiently advanced kernel scripting language is still kernel-level code. I'm not sure eBPF is exactly the savior people are hoping for, though I do still think it remains something of a general improvement if Microsoft can actually get AV vendors and others to use eBPF rather than bespoke kernel drivers.

Re:The CrowdStrike Failure Was a Warning by 0xBDB on Tuesday July 23, 2024 @06:43PM (#41051787)
I'm pretty sure those were actual kernel modules, not eBPF. eBPF for their Linux agent is on their roadmap but not something they are actually doing yet. eBPF should be sandboxed and unable to crash the kernel. Could be I'm missing something, though.