Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Rex is a safe kernel extension framework that allows Rust in the place of eBPF

github.com

Post reply on HN
Print view View original

71–72 of 72 posts

Re: Rex is a safe kernel extension framework that allows Rust in the place of eBPF

#71

Post by ronsor »

ignoramous wrote: post #69
ronsor wrote: post #66

Earlier quoted context omitted.

Evil eBPF programs can hide their presence from the bpf syscall as well.

Interesting. Any good read you'd recommend on the topic/attack? Thanks.

Look up "eBPF rootkits"

This is a good article about one found in the wild: https://www.synacktiv.com/en/publications/linkpro-ebpf-rootk...

Re: Rex is a safe kernel extension framework that allows Rust in the place of eBPF

#72

Post by johnisgood »

nickpsecurity wrote: post #54
johnisgood wrote: post #15

Earlier quoted context omitted.

I mean, I was going to reply "take a wild guess" to him, but your message is correct, too. (I may come across as an Ada zealot myself.)

Quick, random question. I heard way back that SPARK was getting safe pointers in response to Rust's borrow checker. Has full Ada solved their unsafe de-allocation problem in a way that's comparable to the borrow checker's guarantees?

Yes, it was introduced many years ago and has been in production for quite some time now. You can completely eliminate use-after-free, double-free, dangling pointers, memory leaks, and null dereferences.

You should take another look, lots have changed in this scene.

Post reply on HN