zlacker

[return to "“Paranoid Mode” Compromise Recovery on Qubes OS"]
1. hackus+NI1[view] [source] 2017-04-29 05:01:23
>>jerhei+(OP)
An excellent point that applies to almost any system:

The inconvenient and somehow embarrassing truth for us – the malware experts – is that there does not exist any reliable method to determine if a given system is not compromised.

◧◩
2. _sbrk+7Y1[view] [source] 2017-04-29 11:32:36
>>hackus+NI1
Total bull. Take the filesystem offline and run Tripwire over it (assuming you did this after a fresh install).

We solved this problem in the 90s. Try to keep up.

sigh

◧◩◪
3. alasda+WB2[view] [source] 2017-04-29 20:22:23
>>_sbrk+7Y1
Right. And what do you do when the filesystem comes back clean because the malware resides in some re-flashed firmware?

You can almost get a pass for being condescending ("try to keep up") if you know what you are talking about, but being both condescending AND wrong just makes you look foolish.

[go to top]