It is possible to circumvent any single method of detection. And it's even possible to circumvent circumvention detection. In the real world this would become an arms race: security experts would find a way to detect the root-kit, and the next one would be able to evade that method of detection. Eventually, however, the hypervisor would spend enough cycles evading detection that the user would get tired of his bogged down machine and would just reinstall the OS.
I don't disagree with her theory, but in practice it is difficult enough to achieve that it will probably never happen.
That's not what she'd be paid, it's what she would bill. Typically the difference between wage and billing rate is a factor of about 3. For example, I'm paid ~$30/hr, but my company bills ~$100/hr for my time. The difference covers administrative costs (like support staff) and other overhead (like rent and equipment). How do you think receptionists get paid?
Of course that works. The goal is to be able to detect the root-kit from inside the running system. This because Joe Windows-user will never use a live CD to check for malware. They want something Norton/McAfee/etc. can do to detect the root-kit.
Chemical explosives work by producing very large amounts of gas very quickly. In an atmosphere this creates a large and steep pressure gradient which flows outwards as a shockwave. Without an atmosphere you have a lot of gas that, tho it would disperse at a good rate, would not have nearly the same effect. Most of the explosive energy would be trapped by the gas, causing it to heat up.
It's for this same reason that the lunar landers created suspiciously small dust craters on the moon's surface. Dust was only moved if it came into direct contact with the gas expelled by the lander.
I've read a few posts and I think people are getting the situation a little confused. I did an 8-month Co-op work term with a company in Calgary, Alberta. Rather than put through all the paperwork to get me on payroll for eight months, they hired me on as a contractor. The only real difference was that I would invoice for my hours and I had to take care of my own income tax and other such deductions. I was paid hourly, told what projects to work on, and I still had to ask for days off and such.
According to Canadian law, I was technically an employee of the company. I was still covered by their liability insurance and had all legal benefits of an employee. You'll want to check with a lawyer to ensure that this is the case where you are.
Other pieces of advice:
- Ask to talk to one of their contractors.
- Review the contract carefully before accepting, talk to a lawyer if there's anything you don't completely understand.
- Their basically putting a lot of the tedium back on you, so don't be afraid to negotiate.
Incorporation is a good idea if you're signing a lump sum contract (i.e. I will complete this project and you will pay me a bajillion dollars)
because if for any reason you cannot complete the project, all the assets of the contracted body are up for grabs: better that be the meager belongings of your corporation than everything you and your wife own. If you're contracting for hourly pay, it becomes much less risky, since, if something goes wrong, and the contract is properly written up, you stop working and they stop paying you and that's that.
I'm not a lawyer, I'm just taking a business law course right now, and this is bang on topic.
Richard
For one thing, it'd be again ridiculously expensive. But the bigger concern is that the next sizeable volcano erruption, a la Mt. St. Helen, would turn into Bin Laden's wet dream of a dirty bomb.
Slashdot Mirror
I don't disagree with her theory, but in practice it is difficult enough to achieve that it will probably never happen.
That's not what she'd be paid, it's what she would bill. Typically the difference between wage and billing rate is a factor of about 3. For example, I'm paid ~$30/hr, but my company bills ~$100/hr for my time. The difference covers administrative costs (like support staff) and other overhead (like rent and equipment). How do you think receptionists get paid?
Of course that works. The goal is to be able to detect the root-kit from inside the running system. This because Joe Windows-user will never use a live CD to check for malware. They want something Norton/McAfee/etc. can do to detect the root-kit.
It's for this same reason that the lunar landers created suspiciously small dust craters on the moon's surface. Dust was only moved if it came into direct contact with the gas expelled by the lander.
Would make for a pretty light show, tho.
<sig/>
I've read a few posts and I think people are getting the situation a little confused. I did an 8-month Co-op work term with a company in Calgary, Alberta. Rather than put through all the paperwork to get me on payroll for eight months, they hired me on as a contractor. The only real difference was that I would invoice for my hours and I had to take care of my own income tax and other such deductions. I was paid hourly, told what projects to work on, and I still had to ask for days off and such. According to Canadian law, I was technically an employee of the company. I was still covered by their liability insurance and had all legal benefits of an employee. You'll want to check with a lawyer to ensure that this is the case where you are. Other pieces of advice: - Ask to talk to one of their contractors. - Review the contract carefully before accepting, talk to a lawyer if there's anything you don't completely understand. - Their basically putting a lot of the tedium back on you, so don't be afraid to negotiate. Incorporation is a good idea if you're signing a lump sum contract (i.e. I will complete this project and you will pay me a bajillion dollars) because if for any reason you cannot complete the project, all the assets of the contracted body are up for grabs: better that be the meager belongings of your corporation than everything you and your wife own. If you're contracting for hourly pay, it becomes much less risky, since, if something goes wrong, and the contract is properly written up, you stop working and they stop paying you and that's that. I'm not a lawyer, I'm just taking a business law course right now, and this is bang on topic. Richard
For one thing, it'd be again ridiculously expensive. But the bigger concern is that the next sizeable volcano erruption, a la Mt. St. Helen, would turn into Bin Laden's wet dream of a dirty bomb.