[Gllug] Hacker Attack

[Nix]

On Fri, 06 Jan 2006, Martin A. Brooks said:
> Frank Scott wrote:
>> I can't see anything in my logs and chkrootkit hasn't flagged anything.
> 
> One of the interesting thing about having your computer compromised is
> that you have to instantly stop trusting every binary on it.

... unless they're signed and the signing key is not on the machine, and
even then you can't trust your *kernel*, so you still have to boot a
trusted one of those from some other medium.

(see, e.g., digsig from <http://disec.sf.net/>.)

-- 
`I must caution that dipping fingers into molten lead
 presents several serious dangers.' --- Jearl Walker
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug