5 ms·
It’s pretty easy to exfiltrate when you have root access.
by sjg007 8y ago
It’s pretty easy to exfiltrate when you have root access.
- viraptor 8y agoExfiltrate what? We're talking about unknown new vulnerabilities. They'd have to: 1. Find out which computer they're interested in. 2. Find out which files they're interested in. 3. Somehow figure out when they're not in a sandboxed, monitored lab. 4. Exfiltrate via public network. Without testing ground and inside knowledge that doesn't sound easy considering any detection would cause... what we have now. A normal office near which I worked had a malware lab with isolated and logged networking, actual green/red painted sides of the room, dedicated fancy storage, etc. They would know if anything's being uploaded by the AV. NSA likely has a much tighter setup. And again - what's Kaspersky's gain in that situation?
- sjg007 8y agoYou can exfiltrate whatever you want. By installing Kaspersky you've installed a program with root access that may or may not have a backdoor connection to the FSB. These antivirus applications scan for vulnerabilities and also send back telemetry data as well as hashes and maybe even the code of unknown executables.