OutlawCountry: CIA Malware Source Wikileaks {SOLVED}

[kkinkouu]

Hi guys,

I came across this article while reading through wikileak's. I tend to read as much as i can on a number of subjects from multiple sources. https://wikileaks.org/vault7/#OutlawCountry

[eccerr0r]

Sounds like an instrumentation hack - means they need to acquire root first, then they can monitor. But all bets are off if they get root first anyway.

Doesn't sound like anything that critical unless one wants detection of the malware - so that needs to be done by some other method. However it's not like the principle can't be applied to other Linux like Gentoo -- but once again, if they get root first, all bets are off.
_________________
Intel Core i7 2700K/Radeon R7 250/24GB DDR3/256GB SSD
What am I supposed watching?

[kkinkouu]

[eccerr0r]

Difficult... no. I don't think the idea is hard to "port" to Gentoo though because each Gentoo install tends to be slightly different, a general solution may be a bit more difficult (though it's still Linux!)

But again all bets are off if they get root. Stuff like stack clash are the enablers.
_________________
Intel Core i7 2700K/Radeon R7 250/24GB DDR3/256GB SSD
What am I supposed watching?

[Hu]

I concur with eccerr0r. The attack is likely not directly portable to Gentoo systems in its built form, but the principles are easy enough to apply to any Linux. Worry about denying the attacker root access, and you will block this (and many many other bad things) as a natural consequence. Worrying about this specific attack is treating the symptom (privileged intruders can do bad things) rather than the disease (intruders might gain privilege and use it against you).

[kkinkouu]

@Hu & eccerr0r

Thanks for the insight guys much appreciated. I'll keep these thoughts in mind