100
To what extent, if at all, would have CrowdStrike's faulty update have been easier to deal with with an immutable distro? (lemmy.ml)
submitted 2 years ago* (last edited 2 years ago) by to c/technology@lemmy.world
51 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 2 years ago (1 child)

I did hear that one of their newer versions does use eBPF, but I haven't even remotely looked into it.

https://nondeterministic.computer/@mjg59/112816011370924959

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago

    They do have a bpf sensor. It's still shite, managing to periodically peg a CPU core on an idle system. They just lifted and shifted their legacy code into the bpf sensor, they don't actually make good use of eBPF capabilities.

  • permalink
  • fedilink
  • source
  • parent