Re: lug-bg: Pak li e troyan ?

[firedust@xxxxxxx (Stanislav Lechev)]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tuesday 22 May 2001 17:02, you wrote:
> Stanislav Lechev wrote:
> > 1-wo  towa beshe ideq koqto move da posluvi w nachaloto
> > posle ako se okave che ls-a ne wyrshi work...
> > to e twyrde weroqtno mashinata da e troqnizirana s
> > module .... ako ne mi wqrwash moga da ti dam malko linkowe
> > dori imam i sobstweni napisani
> > a ako e taka
> > movesh prosto da zabrawish che shte otkriesh neshto
> > sys kakywto i da e tool !
>
> Nqma neotkriwaem trojan, a tools ima adski mnogo :). Towa za koeto gowori
> Boris Jordanov e malko po-advanced ot ps i ls -l, taka che da ne moje da se
> otkrie.
>

kakto weche kazah kakwato i da e programa 
tq polzwa sys_calls ot kernela
i kernela move da kave kakwoto si iska
taka che programata ti move da si misli che all e nared...

> > oshte poweche che ima nachini da zarazish syshtestwuwasht module !
> > t.e. da ti troqniziram modula za net device primerno
> > nikoga nqma da razberesh
> > posle da ne goworim che ima i nachini da se zaredi
> > module na non-module kernel
> > a i w krajna smetka move da se troqnizira i kernela (samiq)
> > !
> >
> > taka che dokato stignesh to twoite tools otdawna  trqbwa da ti e
> > qsno che nqma oprawiq !
>
> Kernela kogato ne e bootnat ne e nishto poweche ot obiknowen file :),
> syshto kakto ps. Wyprosyt e che wseki uwajawasht sebe si admin moje da se
> postarae da si naprawi checksums i backups na fajlowe, koito smqta za
> kriticheski wajni (kato naprimer kernela i wsichki moduli) i da si gi
> zapishe na disketa. Procesyt na bootwane ot disketa i srawnqwane na tezi
> fajlowe s namirashtite se na diska checksums e detska igrachka i e
> efektiwen i sreshtu wsqkakwi stealth tehniki.

da za towa sym syglasen edinstweniq nachin da otkriesh razlikata e da 
bootnesh s chist kernel...

no az silno se symnqwam che ima takiwa paranoici deto da si pazqt checksums 
na modulite i tnt...
che i da bootwat s disketi da agi prowerqwat ...

wse edno de ... to taka ili inache nqma i tolkowa zahitreli hackeri
koito da sa dostatychno dobri che da ti troqnizirat perfect kernela :)))

a i struwa li si chowek da si igrae da troqnizira chak tolkowa :))

wsichko towa beshe prosto hipotetichno :)

[.....]
- -- 
- -===============================================================-
- - Regards,                                            AngelFire -
- -     Stanislav Lechev                    <firedust@xxxxxxx>    -
- -    PGP Key: http://firedust.vega.bg/pgp/StanislavLechev.asc   -
- -  Vega Internet Service Provider (tm)  --  http://www.vega.bg  -
- -===============================================================-
   Everyone is a genius. 
     It's just that some people are too stupid to realize it.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE7C3Iu8RPXBhiMqewRAhocAJ9UEBC9MmbcuN36JkV2vM2dEQkvcwCfQlPb
nmBC/lHwdzZDz5bxv4uAx8A=
=9Z0J
-----END PGP SIGNATURE-----
===========================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers)
http://www.linux-bulgaria.org/ Hosted by Internet Group Ltd. - Stara Zagora