On Fri, 04 Jul 2008 09:19:39 -0700, Darren New wrote:

> Jim Henderson wrote:
>> On Fri, 04 Jul 2008 12:03:55 +0100, Invisible wrote:
>> 
>>>>> a kernel-level debugger can see every octet of data in the machine's
>>>>> main RAM and swap file.
>>>> Hmmm, so you've reversed your opinion on whether or not a memory dump
>>>> is useful? ;-) <scnr>
>>> Useful for trying to grab somebody's credit card number? Absolutely!
>> 
>> And how exactly do you propose to do that?
> 
> It's pretty trivial, really.  Scan thru memory looking for 16 digits
> that match the LUHN 10 algorithm. That's what CardShark (FV's sample
> "encryption isn't good enough" program) did, in essence.

I was hoping Andy would answer the question, because I was attempting to 
make a point about kernel debugging. :-(

Jim

Post a reply to this message