Rootkit

[Mike McCarty]

John Wendel wrote:
> 
> While reading this thread it occurred to me that if disk drives had a 
> read-only switch, then systems would be uncrackable. Automated updates 
> would be impossible, but I could live with a complicated update process 
> if it would guarantee that my programs couldn't be compromised.
> 
> Can someone tell me why this isn't a good idea?  There must be a fatal 
> flaw that I don't see, or else someone would be selling drives like this.

There are several possible interactions. These occur to me immediately.

First, if this were done on a disc which contained the syslogs,
then no syslogs could be made.

Second, if this were done where mount info and so forth get stored,
then the system couldn't boot.

Third, if this were done to a "data file only" disc, then access time
information could not be stored.

Mike
-- 
p="p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);}
Oppose globalization and One World Governments like the UN.
This message made from 100% recycled bits.
You have found the bank of Larn.
I can explain it for you, but I can't understand it for you.
I speak only for myself, and I am unanimous in that!