Rutkowska Faces 'Blue Pill' Rootkit Challenge

Controll3r writes "Three high-profile security researchers — Thomas Ptacek of Matasano Security, Nate Lawson of Root Labs and Symantec's Peter Ferrie — have issued a challenge to Joanna Rutkowska to prove that her 'Blue Pill' technology can create "100 percent undetectable" malware. The Black Hat 2007 challenge will feature two untouched laptops of the make/model of Rutkowska's choosing for her to plant Blue Pill on one. From the article: 'She picks one in secret, installs her kit, sets them up however she wants,' Lawson explained in an interview. 'We get to install our software on both and run it, [and] we point out which machine [Blue Pill] is on. If we're wrong, she keeps the laptop.' No word on whether Rutkowska will accept the challenge."

Comments

Not a good deal

[NewToNix]

It's a 50/50 shot if they just point at one or the other laptops and say "there be the Blue Pill'. But She only gets to keep one if they chose wrong.

This is just nothing at all proof wise --unless their soft can show how it detected the Blue Pill box.

Now make it three (or more) laptops of her choice and winner takes all... that's a real test of who has the real stuff.

Iocane rootkit

[Quantum Jim]

Vincini: But it's so simple. All I have to do is divine from what I know of you: Are you the sort of man who would install the rootkit into his own computer or his enemy's? Now, a clever man would install the rootkit into his own computer because he would know that only a great fool would install what he was given in a popup. I am not a great fool so I can clearly not choose the laptop in front of you. But you must have known I was not a great fool - you would have counted on it - so I can clearly not choose the wine in front of me!

Westley: You've made your decision then?

Vincini: Oh not remotely! Because Blue Pill comes from Australia, as everyone knows, and Australia is entirely peopled with copyright infringers. And copyright infringers are used to having people not trust them as you are not trusted by me so I can clearly not choose the wine in front of you.

Westley: Truly, you have a dizzying intellect.

Vincini: Wait 'till I get going! Where was I?

Westley: Australia.

Vincini: Yes, Australia! And you must have suspected I would've know the rootkit's origin so I can clearly not choose the laptop in front of me.

Westley: You're just stalling now.

Vincini: You'd like to think that wouldn't you?!? You've beaten my giant password which means you're firewall's exceptionally strong, so you could've installed the laptop in your own computer trusting on your processing power to save you, so I can clearly not choose the laptop in front of you. But, you've also bested my Spaniard, which means you must've studied - and in studying you must've learned that man is mortal, so you would've installed the rootkit as far from yourself as possible, so I can clearly not choose the laptop in front of me.

Westley: You're trying to trick into giving away something. It won't work.

Vincini: It has worked! You've given everything away! I know where the rootkit is!

Westley: Then make your choice!

Vincini: I will. And I choose... What in the world can that be?!?

Westley: What? Where? I don't see anything.

Vincini: Oh well I... I could've sworn I saw something... No matter.

Westley: What's so funny?

Vincini: I'll tell ya in a minute. First, let's boot up. Me from my computer and you from yours.

Westley: You guessed wrong.

Vincini: You only think I guessed wrong. That's what's so funny! I switched laptops when your back was turned! Haha! You fool! You fell victim to one of the classic blunders. The most famous is never get involved in a land war in Asia, but only slightly less well known is this: never go in against a Sicilian when identity theft is on the line! HAHAHAHAHAhaha! aHahahahaha! aHahaha!

*bluescreen of death*