Hacker News Reader

Mozilla is prototyping a Firefox feature (called "Inject Eject") to sandbox the browser process, not to protect the system from web content exploits, but to protect Firefox itself from the system (antivirus software injecting crashy DLLs into the Firefox process). Here is the bug:

https://bugzilla.mozilla.org/show_bug.cgi?id=1435780

View on HN

This sort of thing is why MS implemented 'PatchGuard' on windows 10 to stop AV vendors from patching OS routines and paths. The system will now bugcheck if the checksums of certain pages change. It also does a few other thing allgedly that MS has deliberately declined to go into detail. But regardless even MS has been fighting back against this garbage.

Not just windows 10, it's apparently been around since 2005:

https://en.wikipedia.org/wiki/Kernel_Patch_Protection

Reply on news.ycombinator.com