Danny Rosseau / file-canary · GitLab
gitlab.com
GitLab.com

cross-posted from: https://programming.dev/post/52544724

I wrote a dead simple file canary tool that will install an eBPF program that drops all outgoing packets if a canary is touched. I wrote this in response to the current trend of supply chain attacks that try to harvest credentials

  • corsicanguppy@lemmy.caEnglish
    3·
    9 hours ago

    Have we ever considered not using really bad installer paradigms until they’re fixed? It seems like alternatives are right there, but still people are choosing the worst idea and running with it.

    I say this as someone who worked Unix and Linux security for an OS vendor – better alternatives are there.