One of the better security modules in the kernel was developed by the NSA.
It’s open source software and Microsoft can’t force it in, the open source model will handle this properly.
- 1 year
Okay well, It wouldn’t have been the first code blob in the kernel (looking at you HDMI)
- 1 year
How about no? The whole proposal looks shady. Where Microsoft says “trust”, I do not.
Oh geeze, that format drives me nuts. Is there a tldr?
Oh, there’s two different links, the kernel lore one is the one I was complaining about.
- 1 year
Oh, I didn’t think to check. Figured they were the same. But yeah, looking at it now it looks rather horrible, doesn’t it?
- 1 year
This adds the Hornet Linux Security Module which provides signature verification of eBPF programs.
did we arrive at the second stage of embrace, extend, extinguish?
No, Microsoft would likely sooner fully adopt the Linux kernel tbh.
It aligns with their software/service as a service model.
My bet is you’ll see a “windows 11” compatible user space running on Linux a la WSL ( LSW? ) in the coming decade.
I know Linux engineers who moved to Microsoft generally for this purpose
that’s how the “extinguish” phase start - integrate it closely into your own product, so people use yours instead
henfredemars@infosec.pubEnglish
1 yearVery interesting. I’m sure it will find some consumers for this code, in systems that use codesign.






