Given that this requires root already, what's the benefit from it being a kernel... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		akavel on July 4, 2017 \| parent \| context \| favorite \| on: CIA Targeting Linux Users With OutlawCountry Netwo... Given that this requires root already, what's the benefit from it being a kernel module, vs. just running a few iptables commands to add a new rule?

sikosmurf on July 4, 2017 | [–]

It won't show up with a normal `iptables -L`

jaimex2 on July 4, 2017 | | [–]

yeah, but would light up like a xmas tree on any IDS or packet sniffer.

jlgaddis on July 4, 2017 | [–]

Stealth

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact