Event JSON
{
"id": "2196ce888d48fd496fe49f601a388a1f9e1e6f79a4366c084b969b2d804bfa8c",
"pubkey": "ee30a6cc8e1bacce91b8f7091ec44b4dfd23f4082edd315738796e10ce7f41f7",
"created_at": 1721658144,
"kind": 1,
"tags": [
[
"e",
"e7be9219988ae8eee5cab3721a1baadfad13d0abf4f72aa09c4d4dc2fa81c6b9",
"",
"root"
],
[
"p",
"ee30a6cc8e1bacce91b8f7091ec44b4dfd23f4082edd315738796e10ce7f41f7"
],
[
"e",
"20623ae65cc09fcc2615ae50a6e1086f8e7850d3dba039f839c891f2ff77cd0b",
"",
"reply"
],
[
"proxy",
"https://social.hacktheplanet.be/@neo/112830588176699036",
"web"
],
[
"p",
"037af78bdc8101fc02e30154c3abc51a834bda9be725a63370de49855d4b574a"
],
[
"proxy",
"https://social.hacktheplanet.be/users/neo/statuses/112830588176699036",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://social.hacktheplanet.be/users/neo/statuses/112830588176699036",
"pink.momostr"
],
[
"-"
]
],
"content": "it's bad. Crowdstrike have a driver running in ring 0 on the CPU, the highest privilege level. Imagine what it can do for a second. These drivers are required to be signed by Microsoft. To prevent having to go through the signature process every time they update the driver they have it execute dynamic code downloaded in userspace through updates. That is absolutely insane. Reference: https://youtu.be/wAzEJxOo1ts",
"sig": "4f8cd2107cda289098db199bbc01bf54acf5291ba1bb4bf04a6aa163c2d96a4e958949d014aa71ec760472fd29d41f66f927b228299abaaa2f4d3e1f80a15a58"
}
