The most valuable thing I learned from my math degree is the importance of checking your work. To check your work means to check it *another way*, not just doing the work again a second time.

Like @cloudflare.social you too can mitigate Copy Fail with #eBPF, and if you don't want to write your own program to do it, you can do it with OSS Tetragon - @isala.me describes how here: isala.me/blog/mitigat...

Blocking Copy Fail (CVE-2026-31431) in Kubernetes with Tetragon | Isala Piyarisi

A 732-byte Python script roots every Linux distro since 2017. Kernel patches are still rolling out. Here is how to block it at the syscall level with Tetragon and 22 lines of YAML.

isala.me

Bill Mulligan 🐝🐝🐝@breakawaybilly.bsky.social · 4mo ago

Cloudflare’s response to the “Copy Fail” Linux vulnerability is where runtime security is heading 🐝 Instead of waiting for a full fleet-wide reboot cycle to roll out patched kernels across hundreds of cities, they deployed an eBPF program as a live mitigation.

A lightweight, eBPF-based tracing tool designed to generate FlameGraphs for NFS client activity github.com/4rivappa/nfs...

GitHub - 4rivappa/nfs-flamegraph: eBPF-based NFS throughput Flamegraph

eBPF-based NFS throughput Flamegraph. Contribute to 4rivappa/nfs-flamegraph development by creating an account on GitHub.

github.com

Nobody ever did anything remarkable while avoiding being called weird.