Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

At least in recently windows10 preview, patch kernel memory area itself was no longer allowed, only hooks are allowed to be used to alter the kernel behavior (thus breaking some silly anti cheat engine). And it also comes with a option to enforce these with virtualization.

So yes, it is ongoing. But not Kernel -> Userspace. Instead it is Hypervisor mode Kernel(?) -> Kernel.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: