A more reasonable claim would be that microsoft should have a way to allow virus... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		rocqua on July 19, 2024 \| parent \| context \| favorite \| on: CrowdStrike Update: Windows Bluescreen and Boot Lo... A more reasonable claim would be that microsoft should have a way to allow virus-scanners to run without needing to be able to crash the kernel. That isn't an easy thing to do, but it should be possible.

bdd8f1df777b on July 19, 2024 [–]

I don't think that is possible. How can an anti-virus not in kernel mode defend against viruses running in kernel mode then?

rocqua on July 22, 2024 | [–]

Ebpf can, I believe, not crash the Kernel

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact