[funsec] Microsoft: Rootkits and Blaster

Blue Boar BlueBoar at thievco.com
Tue Dec 6 13:33:14 CST 2005


Dude VanWinkle wrote:
> you would have to load first in order to beat a good rootkit right?
> Windows Update Service is hardly ring 0, or am I totally off my
> rocker?

For a perfectly complete and flawless rootket, yes.  In practice, 
whoever wrote their code second, wins.

					BB


More information about the funsec mailing list