Re:FBI affidavit against Ryan S. Lin in cyberstalking case (...
by microcolonel on Wednesday January 16, 2019 @02:28PM
(#18924132)
FWIW Jason called it A Defensive Rootkit [0].
But the parent post is wrong, the defensive rootkit is not to prevent logging, it's to prevent extracting the configuration from the kernel. It effectively makes the WireGuard configuration write-only from the perspective of userspace. WireGuard does not do any access logging by default as far as I am aware.
But the parent post is wrong, the defensive rootkit is not to prevent logging, it's to prevent extracting the configuration from the kernel. It effectively makes the WireGuard configuration write-only from the perspective of userspace. WireGuard does not do any access logging by default as far as I am aware.
[0]: https://lists.zx2c4.com/pipermail/wireguard/2017-November/00...