On Mon, Dec 08, 2014 at 07:56:28AM -0500, Bastien Nocera wrote:
Rootkit won't require opened *server* ports. It will contact a
command
server through a client port, which requires no special privileges. If
you blocked the firewall for user applications, you just made the
system a pain to use for no security benefits.
And perhaps more to the point, a *rootkit* will just turn off (or open
up a hole in) the firewall anyway.
- Solomon
--
Solomon Peachy pizza at shaftnet dot org
Delray Beach, FL ^^ (email/xmpp) ^^
Quidquid latine dictum sit, altum viditur.