[Gllug] Restricting the number of child procs

Nix nix at esperi.org.uk
Fri Jul 4 23:55:21 UTC 2008


On 4 Jul 2008, Richard Jones uttered the following:

> Funnily enough I'm working on some tools which can analyze systems
> without needing to log in (by examining kernel memory directly).
> Primarily for virtualized systems of course, but I was thinking about
> whether these techniques could be applied to baremetal systems too,
> perhaps by using some sort of modified NIC BIOS to snoop memory.

Shades of the recent malicious hardware paper:
<http://www.usenix.org/event/leet08/tech/full_papers/king/king.pdf>.
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug




More information about the GLLUG mailing list