Slashdot Mirror


Rootkit Packaged for Debian

Erich writes "Debian Developer Simon Richter announced in this posting to debian-devel that he Intends to Package (ITP) a R00tk1t for Debian Linux. The rootkit will make use of debian mechanisms such as diversions to divert the original /bin/ls commands and replace them cleanly by the modified versions. Even reinstalling or upgrading the file-utils package (containing /bin/ls) will then not remove the modified /bin/ls and the rootkit will stay active, being probably the first upgrade-resistant rootkit! This rootkit will then be easy to install by doing "apt-get install rootkit" - a major useability aspect for our fellow wannabe-hackers, making Debian the premier choice for them."

4 of 125 comments (clear)

  1. News for nerds by Lxy · · Score: 2, Redundant

    Unless it's April 1st, then we just make up crap. Apparently there's no anonymous posting available today either.

    --

    There is no reasonable defense against an idiot with an agenda
    :wq
  2. Hmmmm..... by jpreyer · · Score: 0, Redundant

    How many April Fools posting will we see today?

  3. SWEET JEBUS by ramdac · · Score: 0, Redundant

    THIS ROCKS!@#

  4. Are you quite finished? by CaseStudy · · Score: 1, Redundant

    That's what, five straight April Fools' stories, and seven on the day? (Possibly more if there are any in topics I filter out.)

    One is cute. Two is annoying. Seven is just lame.