Re:I am under surveillance by Canadian agents, my computer h...
by muoncf on Sunday February 10, 2013 @09:38AM
(#5196493)
It's actually not all that uncommon for well-written rootkits to do just that.
[ Parent
| on HN ]
Re:I am under surveillance by Canadian agents, my computer h...
by loeg on Sunday February 10, 2013 @02:45PM
(#5197538)
Cool, I learned something. I guess the boot partition is likely to be inactive, and with a ffs-derived file system you can simply overwrite some file in place with your own functionality. E.g., replace some unused driver code with your rootkit, which loads itself on probe.