3
With Ring 0 (kernel) malware anonymity can be preserved
You just need to make sure you are under control of Ring -1 before you get infected by using a Type 1 hypervisor (one that runs underneath the operating system's kernel), and that the Virtual Machine that receives the attack is completely isolated from anything that can leak any identifying information.
...
3
If you have a TPM, you can enable secure boot and proceed the factory reset. This way should assert than the restored OS is healthy as it is signed by ASUS. Then you will be able to disable secure boot for your linux needs.
Without a TPM, the main concerns are about a rootkit (able to insert itself in the OS after the factory reset) or about a malware which ...
2
That's a good question, and the answer is they do, or at least they did.
It used to be a common problem and was one of the reasons it was recommended not to install multiple virus scanners, because they would trigger on the other vendors signatures.
Currently nearly all signature files are encoded or packaged in some way that alleviates cross scans of ...
2
No, you can't tell by looking at it.
There are two mistakes in your reasoning. One is that you're confusing two methods of attack: modifying an existing device, and making a device from scratch. The other is that your research clearly has an observation bias (presumably, because you're finding the things that are easier to find on the web).
Originally, ...
answered 6 hours ago
Gilles 'SO- stop being evil'
44.8k13 gold badges103 silver badges158 bronze badges
1
You are looking at the wrong problem. Handling the file is not an issue. You can save it in the filesystem if you want. You just need to treat is as data. A database blob, a filesystem entry, an in-memory stream. All of those should work.
From Eicar to NotPetya, they are just bytes.
The point where you need to be careful is where programs start processing ...
1
VPN is to virtual machine as air conditioning is to a couch. Very different things.
You have to get clear on what you want to be protected from:
Traffic coming from your machine (to something malicious)
Malware installed on your machine
Those are 2 very different problems. And a VPN protects you from neither.
A Virtual Machine can be used to limit the ...
1
You can reboot, close every single auto-start program you have, close anything not crucial, copy one Ethereum address to clipboard, paste it somewhere and see if it changed.
Then you could use Process Explorer to list every single running process, and run strings (form SysInternals too) on each one searching for the changed address. Unless the address is ...
1
You are confusing a "deceptive" program with "malware". If the app is doing typical app things, like an app manager, then it's not malware.
You have a misnamed app doing things you would not expect a "bible" program to be doing. that's not malware. It's just deception.
So, from a code perspective, it's not doing anything wrong, ...
1
I am working at URIports and checked our stats:
We are processing millions of CSP reports daily and found 99 CSP violations on 14 different domains containing div.show since 2020-07-01. Triggered by multiple versions of Firefox and Chrome on Windows, Linux and MacOS. This is probably caused by a plugin or extension.
Only top voted, non community-wiki answers of a minimum length are eligible
