Stupid question: For those freaking out about Apple's CSAM scanning from a slippery slope argument, why isn't there the same argument about antivirus scanning? Especially when most AV systems have cloud-based uploading facilities for suspicious but not certain files?
-
you cant- it require that you can intercept secure kernel to see it....
here is a very basic tracer of secure kernel transitions https://pastebin.com/raw/DmGmL6eu
