3 ms·
And if you lose root, the disk must be reimaged. Rootkits are too advanced these days to ever make the assumption that you have removed them.
by JonnieCache 16y ago
And if you lose root, the disk must be reimaged. Rootkits are too advanced these days to ever make the assumption that you have removed them.
- bigiain 16y agoIt's possible that sometime not too far in the future that advice might need to be upgraded to "If you lose root, unplug and destroy the hardware and install a completely new machine from trusted sources". http://www.theregister.co.uk/2010/11/23/network_card_rootkit/ http://www.theregister.co.uk/2010/11/23/network_card_rootkit... (Why yes, I _did_ have that problem weighing on my mind while I investigated several machines that had a weekends worth of exposure to the recent Exim remote root exploit...)