Zone Labs: Anatomy of a Coverup

How angels stay clean and scandals stay silent.

Part Fifteen - Why Choose?

Gregor Freund's explanation for traffic escaping Zone Alarm's Internet Lock was unequivocal: If the Italian code had not loaded and unloaded the driver first, Zone Alarm would have caught the traffic.

But upon closer analysis, this made no sense at all. Why didn't Zone Alarm notice the driver the first time? And for that matter, there was an easy test - and Rick and Liston found it almost simultaneously.

At his end, Tom just re-coded one of the programs to automatically load a driver on startup. At his end, Rick just put the adapter name on the command line, as with X-frame (Liston had not been told this was possible). Both came up with the same results.

Zone Alarm could still not see packet level traffic.

Prev | TOC | Next