Hacker News new | ask | show | jobs
by tptacek 1571 days ago
Yeah, the original mode uses ptrace to intercept system calls, and then just implements the system call itself.