Zero-downtime Linux kernel zero-day mitigation via eBPF and SECCOMP | Hacker News Reader