• 0 Posts
  • 169 Comments
Joined 1 year ago
cake
Cake day: June 17th, 2023

help-circle










  • TL;DR: Because the underlying OS is garbage.

    Whatever CrowdStrike’s “features” are should already be core security features of the kernel itself, or be exposed/extracted into user space.

    NT was supposed to be a micro kernel. That this tool injects itself into the kernel immediately compromises the kernel. Edit: I should point out that it seems that CS injects drivers into the Linux kernel too, it might just be that Linux handles a driver crash more elegantly.

    No different to the gaming anti-cheat kernel crap.

    Having a “security” tool immediately compromise your actual security is absurd.





  • Well. To Java that’s just a string of utf-8 characters, assuming you haven’t bastardised the encoding, and it’s just yanked out of an HTTP entity. So of course they’re different.

    If you’re using some json parser and object mapping library (like Jackson) then all bets are off 'cause it could be configured any which way.

    On every other language and library it’s whatever the defined behaviour is.

    3/10