mutterc - Slashdot User

Comment Re:Does rtkhunter... (Score 1) 219

by mutterc on Friday August 24, 2007 @04:11PM (#20347643) Attached to: Forensics On a Cracked Linux Server

There's an interesting third approach, used by Sysinternals's (now part of MS) RootkitRevealer for Windows.

Basically, enumerate all the files on the system using the usual OS APIs. Then, scan the entire raw disk, and enumerate all the files on the system by manually interpreting the directory structures stored on-disk. Any files whose directory entries exist on-disk, but don't show up in the OS's API (with a few standard system exceptions) are being hidden from the OS API layer by a rootkit.

It's certainly theoretically possible to fool, by having your rootkit hook the APIs used to read the raw disk, and returning innocuous values, but that's a good bit harder to do than the other stuff rootkits usually do. Some rootkits fooled it by not hiding their files if the process trying to look them up was named RootkitRevealer.exe, so the tool took to making a randomly-named copy of itself and executing that.

Journal Journal: RIAA to Pay Debbie Foster's Attorneys Fees

Journal by NewYorkCountryLawyer on Tuesday February 06, 2007 @06:38PM

In an Oklahoma case, Capitol Records v. Debbie Foster, the Court has granted the defendant's motion for attorneys fees to be imposed against the RIAA, holding that Ms. Foster is to receive her "reasonable attorney's fees". Judge Lee R. West, in his

Submission + - Net Neutrality Act Once Again on the Agenda

Submitted by

blue234

on Tuesday January 30, 2007 @05:27PM

blue234 writes: "On January 9th, Republican Senator Olympia Snowe and Democrat Byron Dorgan reintroduced the Internet Freedom Preservation act to the Senate. Better known as the Net Neutrality Act, the bill was killed by the Senate last year in a vote split down party lines (Democrats yea, Republicans nay), with the exception of Senator Snowe. With the Democrats having a slight majority in the Senate, the bill certainly has a better chance this time around, but it still needs 60 votes to prevent a Republican filibuster. url: http://www.abcarticledirectory.com/Article/Net-Neu trality-Act-Once-Again-on-the-Agenda/31886"

Submission + - Relocation Package Bait and Switch

Submitted by on Wednesday January 24, 2007 @05:55PM

An anonymous reader writes: I got a R&D job offer with a large company in Philadelphia area last week. It includes a relocation package that they told me was standard for my position.

After I accepted the offer and made plans to terminate my current job, the recruiter handed me off to their relocation department, where I was told that my relocation package is significantly less than what I was promised. The relocation manager tells me that whenever there is conflict between their relocation policy and the offer, their internal relocation policy supersedes.

What I want to know from my fellow Geeks are : 1) Is this type of switch-and-bait common practice in corporate America? 2) If you have gone through this nightmare before, any advice on how to respond to it?

Slashdot Top Deals