Re: yes, its t0rn again

Em Tue, Jan 02, 2001 at 11:33:45PM -0800, Andrew Edelstein escreveu:
> Make sure your md5sum binary is also on immutable media. It doesn't do you any
> good to have known good checksums, if the binary that does the checking can be
> hacked to tell you what the hacker wants it to tell you.

That may also not be enough. A library could have been hacked, md5sum should be
statically linked. And, if a kernel module has been inserted, then all bets
are off, you would have to reboot from a known kernel to be sure.
Received on Jan 03 2001