3 ms·
That would actually be Ring -3! "Traditionally", Ring -1 is the Hypervisor your kernel is running in, -2 is code running in SMM (e.g. BIOS USB legacy support c
by tux3 10y ago
That would actually be Ring -3!
"Traditionally", Ring -1 is the Hypervisor your kernel is running in, -2 is code running in SMM (e.g. BIOS USB legacy support code), and -3 is the firmware on your physical system (chipsets, hard drive firmware, etc).
- microwavecamera 10y agoYup! http://invisiblethingslab.com/resources/bh09usa/Ring%20-3%20Rootkits.pdf http://invisiblethingslab.com/resources/bh09usa/Ring%20-3%20...