[IP] more on Symantec Rootkit revealed

[David Farber <dave@farber.net>]

Begin forwarded message:

From: Gene Spafford <spaf@cerias.purdue.edu>
Date: January 12, 2006 9:04:09 PM EST
To: dave@farber.net
Cc: ip@v2.listbox.com
Subject: Re: [IP] Symantec Rootkit revealed

I really don't think it is fair to call software, such as the  
Symantec product, a "rootkit."   It does not insert control software  
into the system that it then hides from process monitors.

Yes, having something on the system that makes files invisible is not  
necessarily desirable.   But it isn't a rootkit -- other components  
would need to be included.


-------------------------------------
To manage your subscription, go to
 http://v2.listbox.com/member/?listname=ip

Archives at: http://www.interesting-people.org/archives/interesting-people/