more on Symantec Rootkit revealed

[David Farber <dave () farber net>]

Begin forwarded message:

From: Gene Spafford <spaf () cerias purdue edu>
Date: January 12, 2006 9:04:09 PM EST
To: dave () farber net
Cc: ip () v2 listbox com
Subject: Re: [IP] Symantec Rootkit revealed

I really don't think it is fair to call software, such as the  
Symantec product, a "rootkit."   It does not insert control software  
into the system that it then hides from process monitors.

Yes, having something on the system that makes files invisible is not  
necessarily desirable.   But it isn't a rootkit -- other components  
would need to be included.


-------------------------------------
You are subscribed as lists-ip () insecure org
To manage your subscription, go to
 http://v2.listbox.com/member/?listname=ip

Archives at: http://www.interesting-people.org/archives/interesting-people/