Hacker News Reader

Hacker News

Comment by walterbell | Hacker News Reader

Parent Full thread

walterbell

How would this protect against a rootkit?

View on HN

Does anything protect against a rootkit?

(seriously asking)

A piece of tape over the lens?

As a starting point, the protection layer has to have a higher privilege level than the operating system, e.g. hypervisor.

Every method requires an entry point. Like re-flashing an device requires an uncompromised bootloader. You would need an entry point very close to the hardware.

I would say its possible, but not realistic except for very simple devices.

Yeah, when you have a rootkit that's active, there are signals you can look at to claim from a range of "there is most certainly a rootkit" to "there is a small possibility that there is a rootkit".

The program can not be disabled or uninstalled once it is locked, even if you are an administrator. The only way to disable or uninstall the program is with the password that was set to block the webcam.

I don't believe that. If you're administrator, then by design you have access to pretty much "everything", unless your code is running as SYSTEM, or something crazy like that.

iana windows user but this is not passing the smell test.

Also, how does it handle rootkits?

Try to uninstall it without unlocking it first and let me know how you make out. It's a free download. This was done by design for parental control reasons.

So if I boot off a LiveCD and mount the hard drive without starting Windows, what's stopping me from locating and removing this application?

That's the only way to uninstall it without the password.

Would you be willing to back up that claim by offering some cash (I suggest at least $2500) to whoever can prove you wrong?

That the program can not be uninstalled once it is locked?

More generally, that it cannot be disabled/bypassed short of using a boot disk. A "winner" should be able to turn the webcam on without the password when run with administrator privileges.

I am probably just going to give the product away for free, but continue to support it. If any bugs are found I will patch them.

If I decide to continue monetizing the product I will definitely consider the contest. Thanks for your feedback.

Don't have a Windows box, but sounds like fun discovering how to disable it.

* If locked, I assume it prevents access even by changing the USB port?

* Does it prevent other use of the USB ports (flash drives, etc)?

* Does it prevent all cameras, or just the camera identified while the software was running?

* If locked, I assume it prevents access even by changing the USB port? Yes

* Does it prevent other use of the USB ports (flash drives, etc)? No

* Does it prevent all cameras, or just the camera identified while the software was running? Prevents all cameras.

Keylogger?

No keylogger protection for the password, that's in the works for the next version.

Maybe it encrypts part of the webcam driver? This still would not be effective, though.

How does it do this?

Reply on news.ycombinator.com