Reply to thread

Re: FIX for ZoneAlarm & KB951748 issue released


Root Kit wrote:


> <quote>

> "We filter network traffic at the kernel, where malware can't avoid

> us," said James Grant, a ZoneAlarm team lead. "If you filter traffic

> in user mode, malware can see what we're doing." 

> <end-quote>

> Yearh, right. As if malware wouldn't compromise the kernel as well....


Well ... if the user isn't an administrator, it won't.  But what it *can* do is

hook itself into a program that's already allowed access, like your web browser.


   Harry.


Back
Top