funsec mailing list archives

Re: Microsoft: Rootkits and Blaster


From: Blue Boar <BlueBoar () thievco com>
Date: Tue, 06 Dec 2005 11:33:14 -0800

Dude VanWinkle wrote:
you would have to load first in order to beat a good rootkit right?
Windows Update Service is hardly ring 0, or am I totally off my
rocker?

For a perfectly complete and flawless rootket, yes. In practice, whoever wrote their code second, wins.

                                        BB
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: