Reply to thread

Message

<blockquote data-quote="Azure" data-source="post: 717428" data-attributes="member: 29489">Here&#039;s a few quotes from the article:&quot;There is a problem where some anti-virus vendors are using techniques to bypass <a href="https://en.wikipedia.org/wiki/Kernel_Patch_Protection" target="_blank">Kernel Patch Protection</a> by injecting a hypervisor which they use to intercept syscalls and make assumptions about memory locations — memory locations which are now changing with the Meltdown fixes.&quot;&quot;Please stop using goofy, undocumented and hacky ways to predict memory locations and mess with syscalls. There’s 5 key vendors doing this (and lots of OEM vendors licensing engines): please tidy up the code.Source: <a href="https://doublepulsar.com/important-information-about-microsoft-meltdown-cpu-security-fixes-antivirus-vendors-and-you-a852ba0292ec" target="_blank">Important information about Microsoft Meltdown CPU security fixes, antivirus vendors and you</a>What is your opinion on this?</blockquote>

[QUOTE="Azure, post: 717428, member: 29489"] Here's a few quotes from the article: "There is a problem where some anti-virus vendors are using techniques to bypass [URL='https://en.wikipedia.org/wiki/Kernel_Patch_Protection']Kernel Patch Protection[/URL] by injecting a hypervisor which they use to intercept syscalls and make assumptions about memory locations — memory locations which are now changing with the Meltdown fixes." "Please stop using goofy, undocumented and hacky ways to predict memory locations and mess with syscalls. There’s 5 key vendors doing this (and lots of OEM vendors licensing engines): please tidy up the code. Source: [URL="https://doublepulsar.com/important-information-about-microsoft-meltdown-cpu-security-fixes-antivirus-vendors-and-you-a852ba0292ec"]Important information about Microsoft Meltdown CPU security fixes, antivirus vendors and you[/URL] What is your opinion on this? [/QUOTE]

Verification