10-05-2009, 02:24 PM
A team of researchers located an exploit within the new operating system that can allow hackers to take control of a user's machine during the startup process. The problem was identified by Vipin Kumar and Nitin Kumar, who created a program called VBootKit 2.0 that exploits the weakness and allows a hacker to bypass the machine's hard drive entirely, making it nearly impossible to detect. Once hackers can implement the software, they can then change access permissions, passwords, and gain access to a user's sensitive information. What's worse, a program like the one created by Vipin and Nitin Kumar can be as small as 3KBs, and thus can be spread rapidly. Naturally, problems like these are common during the pre-release beta stages, but Vipin and Nitin Kumar claim that this vulnerability is unique and completely unfixable.
"There's no fix for this. It cannot be fixed," said Vipin during his presentation in Dubai. "It's a design problem."
What do yall think about this????
My personal opinion is that truecrypt can fix this problem in a heartbeat. Plus the only way to have a root kit work is locally or maybe though a worm.
"There's no fix for this. It cannot be fixed," said Vipin during his presentation in Dubai. "It's a design problem."
What do yall think about this????
My personal opinion is that truecrypt can fix this problem in a heartbeat. Plus the only way to have a root kit work is locally or maybe though a worm.