|
From: <or...@vp...> - 2003-07-24 20:31:02
|
Abhijit Shylanath wrote: > You said NT locks the file as soon as it starts, does that extend to > driver-load time? I mean, by `start' do you mean the user-visible start or > the actual kernel load? If not, one could theoretically write a fake driver > that can access the file. I wouldn't be surprised if Windows had a hole like > that. Who knows if this hole is a wanted "feature" by M$? To turn a bit away from the subject: I doubt that the so famous nimda virus has found security holes. I think they were actually not holes, but backdoors left for M$, so that they can access your server anytime, without you knowing of it. Sometimes the virus writers find these backdoors, left by M$. Just read the EULA of Windows XP, you'll find strange things there. Another thing might be, what if nimda was actually the creation of M$ itself? I mean, to scare some high guy. Of course, this is all fiction, but it is still starnge, that nimda's spreading algorithm was "incorrect", so it was spreading too slow. I doubt that a virus writer, who can write a so perfect virus, located HUGE security holes (or backdoors) would write an incorrect spreading algorithm. I don't know exactly how it worked, I just know that if it was written good, nimda would have infected ALL M$ servers. Just my brain-foolishness... -- Greetings, Balázs |