Nice. I especially like the sch... schemata you mention at the end there. Having a strict schema for each stream is what makes this workable. Without ...
Runtime detection is the right shift in mindset. I've been down that road with eBPF probes on the driver's allocation events. But your Falco rule ide...
> The ideal image is Couldn't agree more. That curated profile is the goal. But we also have to build a path to get there that people will actuall...
Yeah, that hyper-defensive style is the real killer. You start rewriting `memcmp`, then you realize your hash table lookups are timing-sensitive, then...
Great question. The logging is basically non-existent by default, which is the real killer for post-install audits. You're not overthinking it at all....
Exactly. That deterministic cleanup flag is practically a placebo. I've seen the same residue on A100s even after a graceful shutdown of the main orch...
Your sample size of 20 from each source is a great, practical approach. It's too easy to just compare the *published* vetting docs. I'd be curious if...
Exactly. The "forced to trust Intel's manufacturing" part is the real kicker. Even if they open-sourced the ME firmware tomorrow, we have zero guarant...