Comments on: Sony… Another Root Kit… Not Quite! http://www.computerdefense.org/2007/08/sony-another-root-kit-not-quite/ Sharing my thoughts with the world. Wed, 16 Nov 2011 02:58:20 +0000 hourly 1 http://wordpress.org/?v=3.2.1 By: kurt wismer http://www.computerdefense.org/2007/08/sony-another-root-kit-not-quite/comment-page-1/#comment-77440 kurt wismer Mon, 19 Jan 2009 14:20:06 +0000 http://www.computerdefense.org/?p=380#comment-77440 "THIS ISN’T A ROOTKIT!" you're right, it's not a rootkit - most of what gets called rootkit today isn't a rootkit, but if symantec and kaspersky can both get blasted for providing rootkits (for hiding a protected trash bin and file integrity data respectively) then anyone can... unfortunately the morons popularizing the current concept of a rootkit have twisted the definition to the point where if it hides something then it's a rootkit... this is the definition hoglund uses, it's the definition russinovich uses, so it should be no surprise that av vendors would follow along (in fact, i believe russinovich admitted to following along too)... i've made the same arguments you have about the stupidity of this classification (i even mentioned that windows allows hiding files - see http://anti-virus-rants.blogspot.com/2006/02/this-has-got-to-stop.html) but unfortunately we're going to need a lot more than just a voice or two in the darkness telling people this is dumb before they wise up... "THIS ISN’T A ROOTKIT!"

you're right, it's not a rootkit – most of what gets called rootkit today isn't a rootkit, but if symantec and kaspersky can both get blasted for providing rootkits (for hiding a protected trash bin and file integrity data respectively) then anyone can…

unfortunately the morons popularizing the current concept of a rootkit have twisted the definition to the point where if it hides something then it's a rootkit… this is the definition hoglund uses, it's the definition russinovich uses, so it should be no surprise that av vendors would follow along (in fact, i believe russinovich admitted to following along too)…

i've made the same arguments you have about the stupidity of this classification (i even mentioned that windows allows hiding files – see http://anti-virus-rants.blogspot.com/2006/02/this-has-got-to-stop.html) but unfortunately we're going to need a lot more than just a voice or two in the darkness telling people this is dumb before they wise up…

]]> By: kurt wismer http://www.computerdefense.org/2007/08/sony-another-root-kit-not-quite/comment-page-1/#comment-24465 kurt wismer Thu, 30 Aug 2007 18:23:57 +0000 http://www.computerdefense.org/?p=380#comment-24465 "THIS ISN’T A ROOTKIT!" you're right, it's not a rootkit - most of what gets called rootkit today isn't a rootkit, but if symantec and kaspersky can both get blasted for providing rootkits (for hiding a protected trash bin and file integrity data respectively) then anyone can... unfortunately the morons popularizing the current concept of a rootkit have twisted the definition to the point where if it hides something then it's a rootkit... this is the definition hoglund uses, it's the definition russinovich uses, so it should be no surprise that av vendors would follow along (in fact, i believe russinovich admitted to following along too)... i've made the same arguments you have about the stupidity of this classification (i even mentioned that windows allows hiding files - see http://anti-virus-rants.blogspot.com/2006/02/this-has-got-to-stop.html) but unfortunately we're going to need a lot more than just a voice or two in the darkness telling people this is dumb before they wise up... “THIS ISN’T A ROOTKIT!”

you’re right, it’s not a rootkit – most of what gets called rootkit today isn’t a rootkit, but if symantec and kaspersky can both get blasted for providing rootkits (for hiding a protected trash bin and file integrity data respectively) then anyone can…

unfortunately the morons popularizing the current concept of a rootkit have twisted the definition to the point where if it hides something then it’s a rootkit… this is the definition hoglund uses, it’s the definition russinovich uses, so it should be no surprise that av vendors would follow along (in fact, i believe russinovich admitted to following along too)…

i’ve made the same arguments you have about the stupidity of this classification (i even mentioned that windows allows hiding files – see http://anti-virus-rants.blogspot.com/2006/02/this-has-got-to-stop.html) but unfortunately we’re going to need a lot more than just a voice or two in the darkness telling people this is dumb before they wise up…

]]>