Re: Debian audititing tool?

[Ethan Benson]

On Fri, Dec 22, 2000 at 05:54:55PM -0400, Peter Cordes wrote:
> 
>  That's why you run the checker from a known-good floppy or CD.  The bogus
> kernel can't protect itself if it isn't running :)

don't be so sure, is the BIOS or firmware on your computer flashable?
if so an attacker could replace the firmware/BIOS itself to ensure
later trojans are installed.  

-- 
Ethan Benson
http://www.alaska.net/~erbenson/

PGP signature