📢Call for Papers 📢
The CFP for the 2024 eBPF workshop is out!
More info here: conferences.sigcomm.org/sigcomm/2024/w…
Share emerging eBPF use cases or research challenges by submitting your papers.
Deadline May 19th.
Don't miss this opportunity! #eBPF

- Whole system (including kernel) profiling, < 1% CPU overhead
- x86-64 and ARM64
- No service restarts or recompilation
- C/C++, Rust, Zig, Go, PHP, Python, Ruby, Node, v8, Perl, Hotspot JVM (Java etc)
- Works with containerisation (just install on host)

New PhD position in Paris to work on the #eBPF verifier with Inria and Orange! orange.jobs/jobs/v3/offers…

I'm happy to share the very first #eBPF research grant, from the eBPF Foundation!
pchaigno.github.io/ebpf/2024/04/0…

Wrote a blog about how we do File Monitoring with BPF in Tetragon: isovalent.com/blog/post/file…

I will talk about #eBPF based observability with Universal Profiling.

SyzRetrospector: A Large-Scale Retrospective Study of Syzbot
arxiv.org/pdf/2401.11642…
by Zhiyun Qian Ardalan Amiri Sani
Lots of great detailed data and insights on kernel fuzzing bugs found by syzbot

Please help spread the word that #Linux #perf_tools is looking for #gsoc2024 contributors: lore.kernel.org/linux-perf-use…

syzkaller descriptions now have support for conditional fields 👍

This is when a structure field (or a union option) is only present when the value of another field satisfies a specified condition.

Documentation: github.com/google/syzkall…

After Rust and C, it seems we can now write #eBPF programs in #Elixir : github.com/lac-dcc/honey-…!

people.kernel.org/kuba/netdev-in… cc Dmitry Vyukov

Is remote code execution in UEFI firmware possible?
Yes it is.
Meet #PixieFAIL : 9 vulnerabilities in the IPv6 stack of EDK II, the open source UEFI implementation used by billions of computers.
Full details by Francisco Falcon and iarce in our new blog post:
blog.quarkslab.com/pixiefail-nine…

Today, Cisco announces the intent to acquire Isovalent 🎉 What a milestone for Cilium, eBPF, and our team. Thank you to all of you in the community and all our customers and partners for helping us get where we are today.

isovalent.com/blog/post/cisc…

I had a blast in Lorient, presenting to a great audience!

I've uploaded my slides at pchaigno.github.io/assets/CNCF%20….
twitter.com/pchaigno/statu…

On Thursday, I'll give an introductory talk about #eBPF in Kubernetes at Cloud Native Lorient!
twitter.com/cncflorient/st…

As an userspace eBPF runtime, bpftime can do more than just tracing!
bpf_override_return can be applied to userspace functions or userspace syscall tracepoints, to change the control flow of them (Ideal for error injection, hot patching, and more!

github.com/eunomia-bpf/bp…
#ebpf

Announcing World of Goo 2!
Now with more goo.
worldofgoo2.com

When do we do that for security conferences?

LWN covered the new #eBPF -powered virtual devices from my colleague Daniel Borkmann: lwn.net/Articles/94996…
Cilium will likely be the very first user!

AWS built their own stateless SYN Proxy with custom SYN cookies using #eBPF !
いわし explains how it works and how they made it scale at #LinuxPlumbers .

Slides: lpc.events/event/17/contr…
Stream: youtube.com/watch?v=J5Hm6P…