|
|
|
|
![]() ![]() |
Aug 18 2006, 01:56 AM
Post
#1
|
|
|
Newbie [Level 3] ![]() ![]() ![]() Group: Members Posts: 42 Joined: 20-April 06 Member No.: 22,190 |
a security threat to be concerned with is the increasing prevalence of viruses containing advanced rootkits to hide their actions or data on the computer. even from the anti-stuff tools.
a rootkit was originally a name for tools that hackers/crackers would use to maintain root on unix/linux machines. root is the uber user with all the permissions on a linux box. on windows these tools can be used to hide data on the harddrive and in the registry by manipulating the way the data is stored. THe windows api(the thing windows uses to communicate to the hardware) reads things in certain ways but the data/structures can be vastly different. an example of this is in the registry the data is stored as numbered strings while the api reads them as null terminated string. the data a rootkit would write is: /hkey_something_or_other/folder/"data that is seen\x0(the null character)data i want hidden" and windows will return: /hkey_something_or_other/folder/"data that is seen" the rootkit reads the raw data and bypasses the windows api so it can read the full data. these programs are everywhere already. windows even has one to deal with the special files on an ntfs filesystem and another to deal with windows update. i've heard that there are many tools to find these things but as of yet i haven't looked into any of them. |
|
|
|
Aug 18 2006, 05:25 AM
Post
#2
|
|
|
Master of All Typos ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 621 Joined: 30-July 06 From: Earth, Usa, Maine, Waterford, Member No.: 27,507 ![]() |
Hmm hidig something on your harddrive. But it is impossible to make it completely untrackable. Right? Well I do not think that you can hide anything. Like when you delete something then you empty your trash bin. There is still a way to retrive that data. right?
|
|
|
|
Aug 19 2006, 05:17 AM
Post
#3
|
|
|
Super Member ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 205 Joined: 14-March 06 From: Vermont or Boston (USA) Member No.: 20,077 |
Well I do not think that you can hide anything. Like when you delete something then you empty your trash bin. There is still a way to retrive that data. right? As you described it, yes you can still retrieve the data. The solution would be to use a "shredder" utility. In essence what it does is find the location and size of the file you want to destroy, and then over-writes it with garbage information fifteen times or more. If you really want to destroy a file overwrite it about fifty times, and there will be no going back. |
|
|
|
![]() ![]() |
Similar Topics
|
Lo-Fi Version | Time is now: 5th September 2008 - 09:08 AM |