Full Disclosure mailing list archives

Re: Full-Disclosure Digest, Vol 89, Issue 15 suspicion of rootkit (Alexandru Balan)


From: Григорий Братислава <musntlive () gmail com>
Date: Thu, 12 Jul 2012 13:25:18 -0400

On Thu, Jul 12, 2012 at 1:11 PM,  <valdis.kletnieks () vt edu> wrote:

There's a number of attacks using the MTRR and IOMMU to cause the CPU to have a
different view of memory.  It is indeed possible for something to be sitting in
memory but not be visible to *you* (while still being visible to something that
didn't expect it to be visible, and thus delivering an exploit).


No! Only is Ptacek and Joanna know about these is attacks. Red pill,
blue pill, rainbow pill.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: