Found, a new rootkit

Les Mikesell lesmikesell at gmail.com
Fri Apr 7 22:55:46 UTC 2006


On Fri, 2006-04-07 at 16:03, Mike McCarty wrote:

> MSDOS does *not* use interrupt driven I/O on those ports. It uses
> BIOS calls, specifically INT 14h. For example, from Ralph Brown's
> interrupt list

I don't see how trusting bios equates to secure code.

> Precisely. And unless an application invokes MSDOS, it will never
> do anything to the serial port, nor will the BIOS.

You can say the same for the keyboard - and the input devices
are more or less interchangeable.  The application might be
COPY.

> If there is more code, there is more exposure. MSDOS has much less
> code than Linux and the Linux drivers for the serial ports.

I think you need to take quality of code into account in a
statement like that.

-- 
  Les Mikesell
   lesmikesell at gmail.com





More information about the fedora-list mailing list