News for hackers. Stuff that matters.

A comment on Show HN: Using eBPF to see through encryption without a proxy.

Re:Show HN: Using eBPF to see through encryption without a p... by worldsavior on Thursday May 08, 2025 @01:35PM (#43928843)
Isn't there already mechanisms for patching specific SSL libraries to view encrypted requests (e.g. frida)? What is the benefit of using eBPF?
[ Parent | on HN ]
Re:Show HN: Using eBPF to see through encryption without a p... by tylerflint on Thursday May 08, 2025 @01:39PM (#43928897)
The main benefit is complete coverage. In production systems there are many different workloads with many different binaries, each with different build processes. Leveraging eBPF enables seeing everything on a system without having to adjust the build pipeline.
[ Parent | on HN ]