On Fri, 19 Apr 2002, Jan Johansson wrote:
>
> Then they dont know what they are saying, i would say that Tripwire / AIDE / such
>will be 100% efficient in detecting kits _PROVIDING_ that your database is current,
>and is stored in a tamper-proof location... and ofcource you actually use and update
>teh IDS database.
>
In security, never said 100%, never. Nothing are good to fully trust. All
are good to be a paranoid, as told by AIDE.
And read the paper (do a search a relevant "The future is here"):
http://staff.washington.edu/dittrich/misc/faqs/rootkits.faq
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]