<article>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#article09_11_11_1517233</id>
	<title>Scientists Unveil Lightweight Rootkit Protection</title>
	<author>CmdrTaco</author>
	<datestamp>1257953160000</datestamp>
	<htmltext>DangerFace writes <i>"Scientists are set to unveil a lightweight system they say makes an operating system significantly <a href="http://www.theregister.co.uk/2009/11/11/hooksafe\_rootkit\_protection/">more resistant to rootkits</a> without degrading its performance. The hypervisor-based system is dubbed HookSafe, and it works by relocating kernel hooks in a guest OS to a dedicated page-aligned memory space that's tightly locked down. The team installed HookSafe on a machine running Ubuntu 8.04, and found the system successfully prevented nine real-world rootkits targeting that platform from installing or hiding themselves. The program was able to achieve that protection with only a 6 percent reduction in performance benchmarks."</i></htmltext>
<tokenext>DangerFace writes " Scientists are set to unveil a lightweight system they say makes an operating system significantly more resistant to rootkits without degrading its performance .
The hypervisor-based system is dubbed HookSafe , and it works by relocating kernel hooks in a guest OS to a dedicated page-aligned memory space that 's tightly locked down .
The team installed HookSafe on a machine running Ubuntu 8.04 , and found the system successfully prevented nine real-world rootkits targeting that platform from installing or hiding themselves .
The program was able to achieve that protection with only a 6 percent reduction in performance benchmarks .
"</tokentext>
<sentencetext>DangerFace writes "Scientists are set to unveil a lightweight system they say makes an operating system significantly more resistant to rootkits without degrading its performance.
The hypervisor-based system is dubbed HookSafe, and it works by relocating kernel hooks in a guest OS to a dedicated page-aligned memory space that's tightly locked down.
The team installed HookSafe on a machine running Ubuntu 8.04, and found the system successfully prevented nine real-world rootkits targeting that platform from installing or hiding themselves.
The program was able to achieve that protection with only a 6 percent reduction in performance benchmarks.
"</sentencetext>
</article>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30064122</id>
	<title>That's where the hypervisor idea comes from...</title>
	<author>mbessey</author>
	<datestamp>1257106440000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p>I think IBM invented hypervisors to allow running multiple OS's on the same hardware back in the 1960s...<br>Yep: <a href="http://en.wikipedia.org/wiki/Hypervisor#Mainframe\_origins" title="wikipedia.org">http://en.wikipedia.org/wiki/Hypervisor#Mainframe\_origins</a> [wikipedia.org]</p></htmltext>
<tokenext>I think IBM invented hypervisors to allow running multiple OS 's on the same hardware back in the 1960s...Yep : http : //en.wikipedia.org/wiki/Hypervisor # Mainframe \ _origins [ wikipedia.org ]</tokentext>
<sentencetext>I think IBM invented hypervisors to allow running multiple OS's on the same hardware back in the 1960s...Yep: http://en.wikipedia.org/wiki/Hypervisor#Mainframe\_origins [wikipedia.org]</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060928</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062722</id>
	<title>Re:So ...</title>
	<author>Anonymous</author>
	<datestamp>1257101460000</datestamp>
	<modclass>None</modclass>
	<modscore>0</modscore>
	<htmltext><p>You're either insulated, or you suck at humor. By your logic windows boxes get administratored.</p></htmltext>
<tokenext>You 're either insulated , or you suck at humor .
By your logic windows boxes get administratored .</tokentext>
<sentencetext>You're either insulated, or you suck at humor.
By your logic windows boxes get administratored.</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061332</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062936</id>
	<title>Re:Sounds like a root kit.</title>
	<author>MickyTheIdiot</author>
	<datestamp>1257102420000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p>What? Spike Milligan must of come up with that strategy.</p></htmltext>
<tokenext>What ?
Spike Milligan must of come up with that strategy .</tokentext>
<sentencetext>What?
Spike Milligan must of come up with that strategy.</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060998</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060994</id>
	<title>Re:What were the rootkits?</title>
	<author>JesseMcDonald</author>
	<datestamp>1257094320000</datestamp>
	<modclass>Informativ</modclass>
	<modscore>2</modscore>
	<htmltext><p>You don't need the full kernel source to build a module, just the header files. These are usually placed in a separate package. Is the kernel <em>header</em> package installed by default?</p></htmltext>
<tokenext>You do n't need the full kernel source to build a module , just the header files .
These are usually placed in a separate package .
Is the kernel header package installed by default ?</tokentext>
<sentencetext>You don't need the full kernel source to build a module, just the header files.
These are usually placed in a separate package.
Is the kernel header package installed by default?</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060896</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30063406</id>
	<title>Apples and Oranges</title>
	<author>Anonymous</author>
	<datestamp>1257104160000</datestamp>
	<modclass>None</modclass>
	<modscore>0</modscore>
	<htmltext><p>That quote from <i>Franklin</i> is about politcal climate and government.  You could just as easily defame the quote by applying it to specific technology, such as a car or computer.  However, they are very different things and don't change the importance of the original quote.<br>I just don't want this all important principal to be lost, is all:<br>
&nbsp; </p><p><div class="quote"><p>They who can give up essential liberty to obtain a little temporary safety, deserve neither liberty nor safety.</p></div></div>
	</htmltext>
<tokenext>That quote from Franklin is about politcal climate and government .
You could just as easily defame the quote by applying it to specific technology , such as a car or computer .
However , they are very different things and do n't change the importance of the original quote.I just do n't want this all important principal to be lost , is all :   They who can give up essential liberty to obtain a little temporary safety , deserve neither liberty nor safety .</tokentext>
<sentencetext>That quote from Franklin is about politcal climate and government.
You could just as easily defame the quote by applying it to specific technology, such as a car or computer.
However, they are very different things and don't change the importance of the original quote.I just don't want this all important principal to be lost, is all:
  They who can give up essential liberty to obtain a little temporary safety, deserve neither liberty nor safety.
	</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060642</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060896</id>
	<title>What were the rootkits?</title>
	<author>Anonymous</author>
	<datestamp>1257093900000</datestamp>
	<modclass>Interestin</modclass>
	<modscore>2</modscore>
	<htmltext><p>I'd like to know the 9 rootkits used.  I know Ubuntu 8.04 is a generation behind the current stable version but I don't think there were any rootkits capable of installing.  I'm assuming the people doing the test didn't install the kernel source on the box.  It isn't installed by default and AFAIK you have to be able to build the kit using the kernel source.  Anyone know of a rootkit that can be installed without creating modules from the kernel source?  Maybe I'm just way out of the loop on owning a Linux box.</p></htmltext>
<tokenext>I 'd like to know the 9 rootkits used .
I know Ubuntu 8.04 is a generation behind the current stable version but I do n't think there were any rootkits capable of installing .
I 'm assuming the people doing the test did n't install the kernel source on the box .
It is n't installed by default and AFAIK you have to be able to build the kit using the kernel source .
Anyone know of a rootkit that can be installed without creating modules from the kernel source ?
Maybe I 'm just way out of the loop on owning a Linux box .</tokentext>
<sentencetext>I'd like to know the 9 rootkits used.
I know Ubuntu 8.04 is a generation behind the current stable version but I don't think there were any rootkits capable of installing.
I'm assuming the people doing the test didn't install the kernel source on the box.
It isn't installed by default and AFAIK you have to be able to build the kit using the kernel source.
Anyone know of a rootkit that can be installed without creating modules from the kernel source?
Maybe I'm just way out of the loop on owning a Linux box.</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061088</id>
	<title>Re:Not degrading the performance?</title>
	<author>bcmm</author>
	<datestamp>1257094680000</datestamp>
	<modclass>Funny</modclass>
	<modscore>3</modscore>
	<htmltext><blockquote><div><p>Now, I might be nieve but why can't these memory aligning tricks be done in the kernel naively?</p></div></blockquote><p>
Were you trying to say "Now, I might be native, but why can't these memory aligning tricks be done in the kernel naively?</p></div>
	</htmltext>
<tokenext>Now , I might be nieve but why ca n't these memory aligning tricks be done in the kernel naively ?
Were you trying to say " Now , I might be native , but why ca n't these memory aligning tricks be done in the kernel naively ?</tokentext>
<sentencetext>Now, I might be nieve but why can't these memory aligning tricks be done in the kernel naively?
Were you trying to say "Now, I might be native, but why can't these memory aligning tricks be done in the kernel naively?
	</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060854</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30069414</id>
	<title>Re:What were the rootkits?</title>
	<author>initialE</author>
	<datestamp>1257097380000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p>Now the real challenge is to get someone to write a new rootkit, and see if it can defeat the protections. What's the point in protecting against known kits?</p></htmltext>
<tokenext>Now the real challenge is to get someone to write a new rootkit , and see if it can defeat the protections .
What 's the point in protecting against known kits ?</tokentext>
<sentencetext>Now the real challenge is to get someone to write a new rootkit, and see if it can defeat the protections.
What's the point in protecting against known kits?</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060896</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062636</id>
	<title>Re:Sounds like a root kit.</title>
	<author>Anonymous</author>
	<datestamp>1257101160000</datestamp>
	<modclass>None</modclass>
	<modscore>0</modscore>
	<htmltext><p><div class="quote"><p>So this thing acts as a hypervisor and loads its own hooks into the kernel.  Sounds like something a root kit would do.</p><p>It reminds me of one approach to avoid a terrorist attack when flying.  Carry your own bomb onto the plane.  After all, what are the chances that there would be two bombs on the plane?</p></div><p>Better way: all the airplanes should be required to carry 72 UGLY virgins as stewardesses.  When the Holy Terror sees he future reward, he'll give up.</p></div>
	</htmltext>
<tokenext>So this thing acts as a hypervisor and loads its own hooks into the kernel .
Sounds like something a root kit would do.It reminds me of one approach to avoid a terrorist attack when flying .
Carry your own bomb onto the plane .
After all , what are the chances that there would be two bombs on the plane ? Better way : all the airplanes should be required to carry 72 UGLY virgins as stewardesses .
When the Holy Terror sees he future reward , he 'll give up .</tokentext>
<sentencetext>So this thing acts as a hypervisor and loads its own hooks into the kernel.
Sounds like something a root kit would do.It reminds me of one approach to avoid a terrorist attack when flying.
Carry your own bomb onto the plane.
After all, what are the chances that there would be two bombs on the plane?Better way: all the airplanes should be required to carry 72 UGLY virgins as stewardesses.
When the Holy Terror sees he future reward, he'll give up.
	</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060998</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061756</id>
	<title>6\%?? Of what system?</title>
	<author>Anonymous</author>
	<datestamp>1257097200000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p>6\% of my mobile phone? Or 6\% of the RoadRunner with its 1 petaflop?</p><p>I think a proper rootkit protection is a <em>passive</em> one. One that only takes resources, if there is actually something to do. How about that?<br>Sorry, 6\% might sound small, but when you add it all together, rootkit-protection, anti-virus, anti-malware, intrusion detection system, honeypot, etc, etc, etc... and end up with only 6\% of your cpu work actually being used for real work... you <em>might</em> start thinking about <em>designing your OS in a proper way in the first place!</em></p><p>I don't like doing it wrong, and then patching it up. Or else I'd use Windows ME.</p><p>Just my two cents.</p></htmltext>
<tokenext>6 \ % of my mobile phone ?
Or 6 \ % of the RoadRunner with its 1 petaflop ? I think a proper rootkit protection is a passive one .
One that only takes resources , if there is actually something to do .
How about that ? Sorry , 6 \ % might sound small , but when you add it all together , rootkit-protection , anti-virus , anti-malware , intrusion detection system , honeypot , etc , etc , etc... and end up with only 6 \ % of your cpu work actually being used for real work... you might start thinking about designing your OS in a proper way in the first place ! I do n't like doing it wrong , and then patching it up .
Or else I 'd use Windows ME.Just my two cents .</tokentext>
<sentencetext>6\% of my mobile phone?
Or 6\% of the RoadRunner with its 1 petaflop?I think a proper rootkit protection is a passive one.
One that only takes resources, if there is actually something to do.
How about that?Sorry, 6\% might sound small, but when you add it all together, rootkit-protection, anti-virus, anti-malware, intrusion detection system, honeypot, etc, etc, etc... and end up with only 6\% of your cpu work actually being used for real work... you might start thinking about designing your OS in a proper way in the first place!I don't like doing it wrong, and then patching it up.
Or else I'd use Windows ME.Just my two cents.</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30072494</id>
	<title>Re:So ...</title>
	<author>Anonymous</author>
	<datestamp>1258040700000</datestamp>
	<modclass>None</modclass>
	<modscore>0</modscore>
	<htmltext><p><div class="quote"><p>There's actually nine rootkits out there for Linux?</p> </div><p>No, they only tested it on nine. There are a hell of a lot more than just nine rootkits for Windows. While for decades malware writers have written viruses for Windows, Linux has always been the home to rootkit writers. I would be surprised if there was less than a hundred rootkits out there for Linux.</p></div>
	</htmltext>
<tokenext>There 's actually nine rootkits out there for Linux ?
No , they only tested it on nine .
There are a hell of a lot more than just nine rootkits for Windows .
While for decades malware writers have written viruses for Windows , Linux has always been the home to rootkit writers .
I would be surprised if there was less than a hundred rootkits out there for Linux .</tokentext>
<sentencetext>There's actually nine rootkits out there for Linux?
No, they only tested it on nine.
There are a hell of a lot more than just nine rootkits for Windows.
While for decades malware writers have written viruses for Windows, Linux has always been the home to rootkit writers.
I would be surprised if there was less than a hundred rootkits out there for Linux.
	</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060802</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30063154</id>
	<title>Re:So ...</title>
	<author>Anonymous</author>
	<datestamp>1257103200000</datestamp>
	<modclass>None</modclass>
	<modscore>0</modscore>
	<htmltext><p>Yes, we have run into the phalanx rootkit where I work. It was modified enough that it was not detected by rkhunter or chkrootkit.</p></htmltext>
<tokenext>Yes , we have run into the phalanx rootkit where I work .
It was modified enough that it was not detected by rkhunter or chkrootkit .</tokentext>
<sentencetext>Yes, we have run into the phalanx rootkit where I work.
It was modified enough that it was not detected by rkhunter or chkrootkit.</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060802</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062744</id>
	<title>Re:So ...</title>
	<author>Anonymous</author>
	<datestamp>1257101580000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p>For a comparison, could you list all the Windows rootkits also?</p></htmltext>
<tokenext>For a comparison , could you list all the Windows rootkits also ?</tokentext>
<sentencetext>For a comparison, could you list all the Windows rootkits also?</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061808</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062720</id>
	<title>Scientists and security</title>
	<author>Anonymous</author>
	<datestamp>1257101460000</datestamp>
	<modclass>None</modclass>
	<modscore>0</modscore>
	<htmltext><p>Its an unfair kneejerk reaction everytime I hear the word "scientist" and "security" spouted in the same sentance the first thing that pops into my mind is yet another stupid idea from someone peddling ignorance from well outside their domain.</p><p>If you don't want viruses to be able to hook the kernel of your favorite operating system...for crying out loud don't login as a user with those privledges.</p><p>Having hooksafe pimps relocate kernel hookers will not prevent your system from contracting an STD.  Most people don't even care about their OS.  They care about their work and crap thats on the computer itself.</p></htmltext>
<tokenext>Its an unfair kneejerk reaction everytime I hear the word " scientist " and " security " spouted in the same sentance the first thing that pops into my mind is yet another stupid idea from someone peddling ignorance from well outside their domain.If you do n't want viruses to be able to hook the kernel of your favorite operating system...for crying out loud do n't login as a user with those privledges.Having hooksafe pimps relocate kernel hookers will not prevent your system from contracting an STD .
Most people do n't even care about their OS .
They care about their work and crap thats on the computer itself .</tokentext>
<sentencetext>Its an unfair kneejerk reaction everytime I hear the word "scientist" and "security" spouted in the same sentance the first thing that pops into my mind is yet another stupid idea from someone peddling ignorance from well outside their domain.If you don't want viruses to be able to hook the kernel of your favorite operating system...for crying out loud don't login as a user with those privledges.Having hooksafe pimps relocate kernel hookers will not prevent your system from contracting an STD.
Most people don't even care about their OS.
They care about their work and crap thats on the computer itself.</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30068806</id>
	<title>Re:I'll take one</title>
	<author>Anonymous</author>
	<datestamp>1257090360000</datestamp>
	<modclass>None</modclass>
	<modscore>0</modscore>
	<htmltext><p>Would you also give up 6\% of your bank account in return for 'security measures' against skimming and other scams?</p></htmltext>
<tokenext>Would you also give up 6 \ % of your bank account in return for 'security measures ' against skimming and other scams ?</tokentext>
<sentencetext>Would you also give up 6\% of your bank account in return for 'security measures' against skimming and other scams?</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060642</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062066</id>
	<title>Re:What were the rootkits?</title>
	<author>tepples</author>
	<datestamp>1257098520000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p><div class="quote"><p>Is the kernel header package installed by default?</p></div><p>One of the first things that a programmer installs on Ubuntu is <tt>build-essential</tt>. This package brings in GCC, GNU Make, and <tt>libc6-dev</tt> (the C standard library headers). And <tt>libc6-dev</tt> brings in the kernel headers. So if you've installed anything from source on Ubuntu, you have the kernel headers.</p></div>
	</htmltext>
<tokenext>Is the kernel header package installed by default ? One of the first things that a programmer installs on Ubuntu is build-essential .
This package brings in GCC , GNU Make , and libc6-dev ( the C standard library headers ) .
And libc6-dev brings in the kernel headers .
So if you 've installed anything from source on Ubuntu , you have the kernel headers .</tokentext>
<sentencetext>Is the kernel header package installed by default?One of the first things that a programmer installs on Ubuntu is build-essential.
This package brings in GCC, GNU Make, and libc6-dev (the C standard library headers).
And libc6-dev brings in the kernel headers.
So if you've installed anything from source on Ubuntu, you have the kernel headers.
	</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060994</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30063938</id>
	<title>Re:Sounds like a root kit.</title>
	<author>AlgorithMan</author>
	<datestamp>1257105900000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><blockquote><div><p>After all, what are the chances that there would be two bombs on the plane?</p></div></blockquote><p>

the a-priori probability</p><blockquote><div><p>P(2 bombs)</p></div></blockquote><p> is very low, but if you know there already is a bomb in it, you have to apply the conditional probability</p><blockquote><div><p>P(2 bombs | 1 bomb)<br>
 = P(2 bombs intersection 1 bomb) / P(1 bomb)<br>
 = P(2 bombs) / P(1 bomb)<br>
 = P(1 bomb and 1 bomb) / P(1 bomb)<br>
 = P(1 bomb)^2 / P(1 bomb)<br>
<b>= P(1 bomb)</b></p></div> </blockquote><p>

so you gain no extra security from this measurement... sorry to disappoint you... &lt;/smart ass&gt;</p></div>
	</htmltext>
<tokenext>After all , what are the chances that there would be two bombs on the plane ?
the a-priori probabilityP ( 2 bombs ) is very low , but if you know there already is a bomb in it , you have to apply the conditional probabilityP ( 2 bombs | 1 bomb ) = P ( 2 bombs intersection 1 bomb ) / P ( 1 bomb ) = P ( 2 bombs ) / P ( 1 bomb ) = P ( 1 bomb and 1 bomb ) / P ( 1 bomb ) = P ( 1 bomb ) ^ 2 / P ( 1 bomb ) = P ( 1 bomb ) so you gain no extra security from this measurement... sorry to disappoint you.. .</tokentext>
<sentencetext>After all, what are the chances that there would be two bombs on the plane?
the a-priori probabilityP(2 bombs) is very low, but if you know there already is a bomb in it, you have to apply the conditional probabilityP(2 bombs | 1 bomb)
 = P(2 bombs intersection 1 bomb) / P(1 bomb)
 = P(2 bombs) / P(1 bomb)
 = P(1 bomb and 1 bomb) / P(1 bomb)
 = P(1 bomb)^2 / P(1 bomb)
= P(1 bomb) 

so you gain no extra security from this measurement... sorry to disappoint you... 
	</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060998</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30070224</id>
	<title>Re:What were the rootkits?</title>
	<author>Anonymous</author>
	<datestamp>1258017180000</datestamp>
	<modclass>None</modclass>
	<modscore>0</modscore>
	<htmltext><p>Three of the rootkits in question (Phalanx, Adore-ng and sk2rc2) don't use modules at all, they inject raw assembly through<nobr> <wbr></nobr>/dev/(k)mem. Also, nothing prevents you from building the module against the same source on your local workstation and then uploading it to the target.</p></htmltext>
<tokenext>Three of the rootkits in question ( Phalanx , Adore-ng and sk2rc2 ) do n't use modules at all , they inject raw assembly through /dev/ ( k ) mem .
Also , nothing prevents you from building the module against the same source on your local workstation and then uploading it to the target .</tokentext>
<sentencetext>Three of the rootkits in question (Phalanx, Adore-ng and sk2rc2) don't use modules at all, they inject raw assembly through /dev/(k)mem.
Also, nothing prevents you from building the module against the same source on your local workstation and then uploading it to the target.</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060896</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060642</id>
	<title>I'll take one</title>
	<author>Anonymous</author>
	<datestamp>1257092940000</datestamp>
	<modclass>Funny</modclass>
	<modscore>5</modscore>
	<htmltext>I would gladly give up 6\% of the performance of my machine if I could be safe from rootkits.  Now queue the "those who would give up system performance for system security deserve neither" posts.</htmltext>
<tokenext>I would gladly give up 6 \ % of the performance of my machine if I could be safe from rootkits .
Now queue the " those who would give up system performance for system security deserve neither " posts .</tokentext>
<sentencetext>I would gladly give up 6\% of the performance of my machine if I could be safe from rootkits.
Now queue the "those who would give up system performance for system security deserve neither" posts.</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061860</id>
	<title>Re:What were the rootkits?</title>
	<author>chipschap</author>
	<datestamp>1257097620000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext>I find it "interesting" that Microsoft was part of this research, and what is tested?   Ubuntu rather than Windows.  No agenda here, I'm sure.</htmltext>
<tokenext>I find it " interesting " that Microsoft was part of this research , and what is tested ?
Ubuntu rather than Windows .
No agenda here , I 'm sure .</tokentext>
<sentencetext>I find it "interesting" that Microsoft was part of this research, and what is tested?
Ubuntu rather than Windows.
No agenda here, I'm sure.</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060896</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061040</id>
	<title>Re:So ...</title>
	<author>vistapwns</author>
	<datestamp>1257094500000</datestamp>
	<modclass>Funny</modclass>
	<modscore>5</modscore>
	<htmltext>No, it's a lie. It's not possible to build a rootkit for linux, it's magical.</htmltext>
<tokenext>No , it 's a lie .
It 's not possible to build a rootkit for linux , it 's magical .</tokentext>
<sentencetext>No, it's a lie.
It's not possible to build a rootkit for linux, it's magical.</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060802</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060736</id>
	<title>Linux</title>
	<author>Anonymous</author>
	<datestamp>1257093180000</datestamp>
	<modclass>Funny</modclass>
	<modscore>1</modscore>
	<htmltext><p>But does it run... oh, right.</p></htmltext>
<tokenext>But does it run... oh , right .</tokentext>
<sentencetext>But does it run... oh, right.</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30081712</id>
	<title>Re:I'll take one</title>
	<author>DaVince21</author>
	<datestamp>1258031880000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p>Overclocking my system only gives me the minimum desired performance - what now?!</p></htmltext>
<tokenext>Overclocking my system only gives me the minimum desired performance - what now ?
!</tokentext>
<sentencetext>Overclocking my system only gives me the minimum desired performance - what now?
!</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060744</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060802</id>
	<title>So ...</title>
	<author>Anonymous</author>
	<datestamp>1257093540000</datestamp>
	<modclass>Interestin</modclass>
	<modscore>4</modscore>
	<htmltext>There's actually nine rootkits out there for Linux? Anyone run into these or have any recommendations of good detection software? I've always been curious if an clamav run from a live CD will pick them up.</htmltext>
<tokenext>There 's actually nine rootkits out there for Linux ?
Anyone run into these or have any recommendations of good detection software ?
I 've always been curious if an clamav run from a live CD will pick them up .</tokentext>
<sentencetext>There's actually nine rootkits out there for Linux?
Anyone run into these or have any recommendations of good detection software?
I've always been curious if an clamav run from a live CD will pick them up.</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061030</id>
	<title>Re:Not degrading the performance?</title>
	<author>Anonymous</author>
	<datestamp>1257094440000</datestamp>
	<modclass>Funny</modclass>
	<modscore>3</modscore>
	<htmltext><p><div class="quote"><p>Now, I might be <b>nieve</b> but why can't these memory aligning tricks be done in the kernel <b>naively</b>?</p></div><p>My spelling error detector just exploded! You jerk!</p></div>
	</htmltext>
<tokenext>Now , I might be nieve but why ca n't these memory aligning tricks be done in the kernel naively ? My spelling error detector just exploded !
You jerk !</tokentext>
<sentencetext>Now, I might be nieve but why can't these memory aligning tricks be done in the kernel naively?My spelling error detector just exploded!
You jerk!
	</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060854</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061006</id>
	<title>Hmm , is there a reason they didn't use Windows?</title>
	<author>Viol8</author>
	<datestamp>1257094380000</datestamp>
	<modclass>Insightful</modclass>
	<modscore>3</modscore>
	<htmltext><p>... it being partly a microsoft research project and all. They wouldn't be trying to imply anything about Linux would they , or perish the thought , be unwilling to embarras themselves if Windows could *still* be rooted even after this solution was installed?</p></htmltext>
<tokenext>... it being partly a microsoft research project and all .
They would n't be trying to imply anything about Linux would they , or perish the thought , be unwilling to embarras themselves if Windows could * still * be rooted even after this solution was installed ?</tokentext>
<sentencetext>... it being partly a microsoft research project and all.
They wouldn't be trying to imply anything about Linux would they , or perish the thought , be unwilling to embarras themselves if Windows could *still* be rooted even after this solution was installed?</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30063356</id>
	<title>Re:So ...</title>
	<author>Anonymous</author>
	<datestamp>1257104040000</datestamp>
	<modclass>None</modclass>
	<modscore>0</modscore>
	<htmltext><p>Two other rootkits you left out:

</p><ul>
<li>Windows</li>
<li>Mac OS X</li>
</ul><p>When infected, these take complete control of the machine, though machines with Atom processors are apparently invulnerable to the latest version of the second rootkit above.</p></htmltext>
<tokenext>Two other rootkits you left out : Windows Mac OS X When infected , these take complete control of the machine , though machines with Atom processors are apparently invulnerable to the latest version of the second rootkit above .</tokentext>
<sentencetext>Two other rootkits you left out:


Windows
Mac OS X
When infected, these take complete control of the machine, though machines with Atom processors are apparently invulnerable to the latest version of the second rootkit above.</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061808</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061332</id>
	<title>Re:So ...</title>
	<author>Anonymous</author>
	<datestamp>1257095760000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p>The reason it's called a <b> <i>root</i> </b>kit is that it hides the fact that your box has been <b> <i>root</i> </b>ed, and what kind of O/S has a <b> <i>root</i> </b> account? Hint: Not Windows.</p></htmltext>
<tokenext>The reason it 's called a root kit is that it hides the fact that your box has been root ed , and what kind of O/S has a root account ?
Hint : Not Windows .</tokentext>
<sentencetext>The reason it's called a  root kit is that it hides the fact that your box has been  root ed, and what kind of O/S has a  root  account?
Hint: Not Windows.</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061040</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061274</id>
	<title>Re:Sounds like a root kit.</title>
	<author>Anonymous</author>
	<datestamp>1257095460000</datestamp>
	<modclass>Funny</modclass>
	<modscore>4</modscore>
	<htmltext><p><div class="quote"><p>It reminds me of one approach to avoid a terrorist attack when flying. Carry your own bomb onto the plane. After all, what are the chances that there would be two bombs on the plane?</p></div><p>That's why the TSA's so harmful. If you outlaw bombs on a plane, then only terrorists will have bombs.</p></div>
	</htmltext>
<tokenext>It reminds me of one approach to avoid a terrorist attack when flying .
Carry your own bomb onto the plane .
After all , what are the chances that there would be two bombs on the plane ? That 's why the TSA 's so harmful .
If you outlaw bombs on a plane , then only terrorists will have bombs .</tokentext>
<sentencetext>It reminds me of one approach to avoid a terrorist attack when flying.
Carry your own bomb onto the plane.
After all, what are the chances that there would be two bombs on the plane?That's why the TSA's so harmful.
If you outlaw bombs on a plane, then only terrorists will have bombs.
	</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060998</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30067702</id>
	<title>Rootkits, schmootkits.</title>
	<author>Zephiris</author>
	<datestamp>1257080820000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p>Mucking with page alignment and/or addressing would effectively prevent Nvidia/fglrx drivers from working (which is more or less why they don't work in HVM or the L4 microkernels, which implement Linux at a lower layer; they expect to be at specific addresses in a specific way, however you make it 'not that address', it doesn't work), nevermind wine, and it'd presumably be hard pressed to get a rootkit onto a well maintained Linux server in the first place, since nobody'd be running with root priveleges except a remote admin that logs in once in a while, with or without 'security modules' or Stack Smashing Protection on top to limit the scope and possibility of any intrusions or privilege escalation.<br>So, this appears useless for desktops, useless for servers, what's left? It's good that money is being spent on research like this...</p></htmltext>
<tokenext>Mucking with page alignment and/or addressing would effectively prevent Nvidia/fglrx drivers from working ( which is more or less why they do n't work in HVM or the L4 microkernels , which implement Linux at a lower layer ; they expect to be at specific addresses in a specific way , however you make it 'not that address ' , it does n't work ) , nevermind wine , and it 'd presumably be hard pressed to get a rootkit onto a well maintained Linux server in the first place , since nobody 'd be running with root priveleges except a remote admin that logs in once in a while , with or without 'security modules ' or Stack Smashing Protection on top to limit the scope and possibility of any intrusions or privilege escalation.So , this appears useless for desktops , useless for servers , what 's left ?
It 's good that money is being spent on research like this.. .</tokentext>
<sentencetext>Mucking with page alignment and/or addressing would effectively prevent Nvidia/fglrx drivers from working (which is more or less why they don't work in HVM or the L4 microkernels, which implement Linux at a lower layer; they expect to be at specific addresses in a specific way, however you make it 'not that address', it doesn't work), nevermind wine, and it'd presumably be hard pressed to get a rootkit onto a well maintained Linux server in the first place, since nobody'd be running with root priveleges except a remote admin that logs in once in a while, with or without 'security modules' or Stack Smashing Protection on top to limit the scope and possibility of any intrusions or privilege escalation.So, this appears useless for desktops, useless for servers, what's left?
It's good that money is being spent on research like this...</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060744</id>
	<title>Re:I'll take one</title>
	<author>Anonymous</author>
	<datestamp>1257093240000</datestamp>
	<modclass>Funny</modclass>
	<modscore>5</modscore>
	<htmltext><p>Those who would give up essential system performance for temporary system security... probably need to learn how to overclock their systems.</p></htmltext>
<tokenext>Those who would give up essential system performance for temporary system security... probably need to learn how to overclock their systems .</tokentext>
<sentencetext>Those who would give up essential system performance for temporary system security... probably need to learn how to overclock their systems.</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060642</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30063202</id>
	<title>Re:Can we learn lessons from mainframe VMs?</title>
	<author>Anonymous</author>
	<datestamp>1257103380000</datestamp>
	<modclass>None</modclass>
	<modscore>0</modscore>
	<htmltext><p><div class="quote"><p>How many rootkits were running around back then?</p></div><p>42</p></div>
	</htmltext>
<tokenext>How many rootkits were running around back then ? 42</tokentext>
<sentencetext>How many rootkits were running around back then?42
	</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061080</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062350</id>
	<title>Re:Rootkit hunter</title>
	<author>Thelasko</author>
	<datestamp>1257099600000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p><div class="quote"><p>Rootkit Hunter [sourceforge.net]</p></div><p>Ubuntu users:</p><blockquote><div><p>sudo apt-get install rkhunter<br>
sudo rkhunter -c</p></div></blockquote><p>
Any warnings about stuff in<nobr> <wbr></nobr><a href="http://devarthur.blogspot.com/2008/02/ubuntu-rkhunter-configuration.html" title="blogspot.com">/dev</a> [blogspot.com] is <a href="http://ubuntuforums.org/showthread.php?p=4908163" title="ubuntuforums.org">likely normal.</a> [ubuntuforums.org]</p></div>
	</htmltext>
<tokenext>Rootkit Hunter [ sourceforge.net ] Ubuntu users : sudo apt-get install rkhunter sudo rkhunter -c Any warnings about stuff in /dev [ blogspot.com ] is likely normal .
[ ubuntuforums.org ]</tokentext>
<sentencetext>Rootkit Hunter [sourceforge.net]Ubuntu users:sudo apt-get install rkhunter
sudo rkhunter -c
Any warnings about stuff in /dev [blogspot.com] is likely normal.
[ubuntuforums.org]
	</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061236</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061796</id>
	<title>That platform</title>
	<author>Anonymous</author>
	<datestamp>1257097380000</datestamp>
	<modclass>None</modclass>
	<modscore>0</modscore>
	<htmltext><p>Since when has a distro qualified as a platform?</p><p>I know Ubuntu is popular, but this sycophancy is going a bit too far.</p></htmltext>
<tokenext>Since when has a distro qualified as a platform ? I know Ubuntu is popular , but this sycophancy is going a bit too far .</tokentext>
<sentencetext>Since when has a distro qualified as a platform?I know Ubuntu is popular, but this sycophancy is going a bit too far.</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30066192</id>
	<title>Re:Not degrading the performance?</title>
	<author>Anonymous</author>
	<datestamp>1257072660000</datestamp>
	<modclass>None</modclass>
	<modscore>0</modscore>
	<htmltext><p><div class="quote"><p>Damn, my RAM is full of llamas.</p></div><p>Well I'll be dipped - mine too!</p></div>
	</htmltext>
<tokenext>Damn , my RAM is full of llamas.Well I 'll be dipped - mine too !</tokentext>
<sentencetext>Damn, my RAM is full of llamas.Well I'll be dipped - mine too!
	</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061088</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062576</id>
	<title>Re:Sounds like a root kit.</title>
	<author>Anonymous</author>
	<datestamp>1257100740000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p>Yes, but we could bring snakes instead.  Snakes, on a mother-fucking plane!</p></htmltext>
<tokenext>Yes , but we could bring snakes instead .
Snakes , on a mother-fucking plane !</tokentext>
<sentencetext>Yes, but we could bring snakes instead.
Snakes, on a mother-fucking plane!</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061274</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061384</id>
	<title>Re:What were the rootkits?</title>
	<author>Anonymous</author>
	<datestamp>1257095940000</datestamp>
	<modclass>Informativ</modclass>
	<modscore>3</modscore>
	<htmltext><p>8.04 isn't a full generation behind anything, it's the LTS version which is most likely to be used by people wanting Ubuntu on a server. They made an excellent choice with using 8.04 as their testbed for this.</p><p>Further, a rootkit absolutely doesn't require any kernel modules. A patched copy of<nobr> <wbr></nobr>/bin/sh works quite fine, but as always it all depends on what you want.</p><p>You're out of the loop.<nobr> <wbr></nobr>:(</p></htmltext>
<tokenext>8.04 is n't a full generation behind anything , it 's the LTS version which is most likely to be used by people wanting Ubuntu on a server .
They made an excellent choice with using 8.04 as their testbed for this.Further , a rootkit absolutely does n't require any kernel modules .
A patched copy of /bin/sh works quite fine , but as always it all depends on what you want.You 're out of the loop .
: (</tokentext>
<sentencetext>8.04 isn't a full generation behind anything, it's the LTS version which is most likely to be used by people wanting Ubuntu on a server.
They made an excellent choice with using 8.04 as their testbed for this.Further, a rootkit absolutely doesn't require any kernel modules.
A patched copy of /bin/sh works quite fine, but as always it all depends on what you want.You're out of the loop.
:(</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060896</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060928</id>
	<title>Can we learn lessons from mainframe VMs?</title>
	<author>davidwr</author>
	<datestamp>1257094020000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p>Surely this problem was addressed in the 1960s or 1970s in the mainframe world, yet I've not heard much in the way of lessons we can apply to today's PC-type OSes.</p><p>Anyone? Anyone?  Bueller?</p></htmltext>
<tokenext>Surely this problem was addressed in the 1960s or 1970s in the mainframe world , yet I 've not heard much in the way of lessons we can apply to today 's PC-type OSes.Anyone ?
Anyone ? Bueller ?</tokentext>
<sentencetext>Surely this problem was addressed in the 1960s or 1970s in the mainframe world, yet I've not heard much in the way of lessons we can apply to today's PC-type OSes.Anyone?
Anyone?  Bueller?</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060800</id>
	<title>\_only\_ a 6-percent reduction?</title>
	<author>Anonymous</author>
	<datestamp>1257093540000</datestamp>
	<modclass>Offtopic</modclass>
	<modscore>-1</modscore>
	<htmltext><p>Hey everyone,</p><p>Please give give me \_only\_ 6\% of your salaries and I'll sit on top your debit card.  Note: no hard guarantee that someone (ex-partner etc) will not find a way to undermine my postion and deprive you of your full salary.</p></htmltext>
<tokenext>Hey everyone,Please give give me \ _only \ _ 6 \ % of your salaries and I 'll sit on top your debit card .
Note : no hard guarantee that someone ( ex-partner etc ) will not find a way to undermine my postion and deprive you of your full salary .</tokentext>
<sentencetext>Hey everyone,Please give give me \_only\_ 6\% of your salaries and I'll sit on top your debit card.
Note: no hard guarantee that someone (ex-partner etc) will not find a way to undermine my postion and deprive you of your full salary.</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061360</id>
	<title>Re:How well would this play with Anti Virus progra</title>
	<author>thijsh</author>
	<datestamp>1257095820000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p><div class="quote"><p>I can see potential problems if this type of solution ever becomes common though I suppose you could argue that you <b>shouldn't need anti virus protection</b> if you have this hypervisor.</p></div><p>Hah! Well I see a potential problem there.<nobr> <wbr></nobr>:)<br>
But others (the bad kind) probably see only the potential...</p></div>
	</htmltext>
<tokenext>I can see potential problems if this type of solution ever becomes common though I suppose you could argue that you should n't need anti virus protection if you have this hypervisor.Hah !
Well I see a potential problem there .
: ) But others ( the bad kind ) probably see only the potential.. .</tokentext>
<sentencetext>I can see potential problems if this type of solution ever becomes common though I suppose you could argue that you shouldn't need anti virus protection if you have this hypervisor.Hah!
Well I see a potential problem there.
:)
But others (the bad kind) probably see only the potential...
	</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061168</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062210</id>
	<title>Re:I'll take one</title>
	<author>the\_womble</author>
	<datestamp>1257099120000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p><div class="quote"><p>I would gladly give up 6\% of the performance of my machine if I could be safe from rootkits.</p> </div><p>Worthwhile: yes.</p><p>Lightweight: no</p></div>
	</htmltext>
<tokenext>I would gladly give up 6 \ % of the performance of my machine if I could be safe from rootkits .
Worthwhile : yes.Lightweight : no</tokentext>
<sentencetext>I would gladly give up 6\% of the performance of my machine if I could be safe from rootkits.
Worthwhile: yes.Lightweight: no
	</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060642</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061228</id>
	<title>If it can be added, it can be removed</title>
	<author>RiotingPacifist</author>
	<datestamp>1257095220000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p>You cannot protect against root kits, all you can do is make it harder to get true root. How is this more effective than making key binaries immutable then removing the kernel ability to remove immutability during boot (performance cost 0\%)?</p></htmltext>
<tokenext>You can not protect against root kits , all you can do is make it harder to get true root .
How is this more effective than making key binaries immutable then removing the kernel ability to remove immutability during boot ( performance cost 0 \ % ) ?</tokentext>
<sentencetext>You cannot protect against root kits, all you can do is make it harder to get true root.
How is this more effective than making key binaries immutable then removing the kernel ability to remove immutability during boot (performance cost 0\%)?</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062704</id>
	<title>Re:I'll take one</title>
	<author>SnarfQuest</author>
	<datestamp>1257101400000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p>Boot off a DVD. Have everything possible, including configuration files, run off the DVD.</p><p>It makes reconfiguring the system a bit harder, but it also makes messing up the system files a great deal harder.</p></htmltext>
<tokenext>Boot off a DVD .
Have everything possible , including configuration files , run off the DVD.It makes reconfiguring the system a bit harder , but it also makes messing up the system files a great deal harder .</tokentext>
<sentencetext>Boot off a DVD.
Have everything possible, including configuration files, run off the DVD.It makes reconfiguring the system a bit harder, but it also makes messing up the system files a great deal harder.</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060642</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062016</id>
	<title>Fi8st po5t</title>
	<author>Anonymous</author>
	<datestamp>1257098340000</datestamp>
	<modclass>Redundant</modclass>
	<modscore>-1</modscore>
	<htmltext>good manLners</htmltext>
<tokenext>good manLners</tokentext>
<sentencetext>good manLners</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30065856</id>
	<title>Re:Not degrading the performance?</title>
	<author>Attila Dimedici</author>
	<datestamp>1257071220000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p><div class="quote"><p>  Now, I might be nieve but why can't these memory aligning tricks be done in the kernel naively?</p></div><p>What does the fact that you might be a fist ( <a href="http://www.yourdictionary.com/nieve" title="yourdictionary.com">http://www.yourdictionary.com/nieve</a> [yourdictionary.com] )have to do with doing something naive in the kernel?</p></div>
	</htmltext>
<tokenext>Now , I might be nieve but why ca n't these memory aligning tricks be done in the kernel naively ? What does the fact that you might be a fist ( http : //www.yourdictionary.com/nieve [ yourdictionary.com ] ) have to do with doing something naive in the kernel ?</tokentext>
<sentencetext>  Now, I might be nieve but why can't these memory aligning tricks be done in the kernel naively?What does the fact that you might be a fist ( http://www.yourdictionary.com/nieve [yourdictionary.com] )have to do with doing something naive in the kernel?
	</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060854</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061466</id>
	<title>By any other name</title>
	<author>fibonacci8</author>
	<datestamp>1257096240000</datestamp>
	<modclass>Insightful</modclass>
	<modscore>4</modscore>
	<htmltext><p>A root kit is just a sandbox that someone else has set up for you on what is now his or her computer.</p></htmltext>
<tokenext>A root kit is just a sandbox that someone else has set up for you on what is now his or her computer .</tokentext>
<sentencetext>A root kit is just a sandbox that someone else has set up for you on what is now his or her computer.</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061808</id>
	<title>Re:So ...</title>
	<author>Anonymous</author>
	<datestamp>1257097380000</datestamp>
	<modclass>Informativ</modclass>
	<modscore>4</modscore>
	<htmltext><p><div class="quote"><p>There's actually nine rootkits out there for Linux?</p></div><p>The rootkits in question are:</p><ul>
<li> <a href="http://lwn.net/Articles/75990/" title="lwn.net">adore-ng 0.56</a> [lwn.net]</li>
<li>eNYeLKM 1.2</li>
<li>sk2rc2</li>
<li>superkit</li>
<li> <a href="http://www.theregister.co.uk/2008/08/27/ssh\_key\_attacks\_warning/" title="theregister.co.uk">Phalanx b6</a> [theregister.co.uk]</li>
<li>mood-nt 2.3</li>
<li>override</li>
<li>Sebek 3.2.0b</li>
<li>hideme.vfs</li>
</ul><p>
Some of them are in the wild an some are just for research.  For more information, I would check out <a href="http://www.packetstormsecurity.org/UNIX/penetration/rootkits/indexdate.html" title="packetstormsecurity.org">this page.</a> [packetstormsecurity.org]</p></div>
	</htmltext>
<tokenext>There 's actually nine rootkits out there for Linux ? The rootkits in question are : adore-ng 0.56 [ lwn.net ] eNYeLKM 1.2 sk2rc2 superkit Phalanx b6 [ theregister.co.uk ] mood-nt 2.3 override Sebek 3.2.0b hideme.vfs Some of them are in the wild an some are just for research .
For more information , I would check out this page .
[ packetstormsecurity.org ]</tokentext>
<sentencetext>There's actually nine rootkits out there for Linux?The rootkits in question are:
 adore-ng 0.56 [lwn.net]
eNYeLKM 1.2
sk2rc2
superkit
 Phalanx b6 [theregister.co.uk]
mood-nt 2.3
override
Sebek 3.2.0b
hideme.vfs

Some of them are in the wild an some are just for research.
For more information, I would check out this page.
[packetstormsecurity.org]
	</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060802</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30064876</id>
	<title>The actual paper</title>
	<author>rabtech</author>
	<datestamp>1257066300000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p>The paper: <a href="http://discovery.csc.ncsu.edu/pubs/ccs09-HookSafe.pdf" title="ncsu.edu">http://discovery.csc.ncsu.edu/pubs/ccs09-HookSafe.pdf</a> [ncsu.edu]</p><p>And the required Schneier blog post: <a href="http://www.schneier.com/blog/archives/2009/11/protecting\_oss.html" title="schneier.com">http://www.schneier.com/blog/archives/2009/11/protecting\_oss.html</a> [schneier.com]</p></htmltext>
<tokenext>The paper : http : //discovery.csc.ncsu.edu/pubs/ccs09-HookSafe.pdf [ ncsu.edu ] And the required Schneier blog post : http : //www.schneier.com/blog/archives/2009/11/protecting \ _oss.html [ schneier.com ]</tokentext>
<sentencetext>The paper: http://discovery.csc.ncsu.edu/pubs/ccs09-HookSafe.pdf [ncsu.edu]And the required Schneier blog post: http://www.schneier.com/blog/archives/2009/11/protecting\_oss.html [schneier.com]</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061858</id>
	<title>Re:I'll take one</title>
	<author>binarylarry</author>
	<datestamp>1257097620000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p>In the spirit of slashdot, I feel instead of a gun, it should be a +3 or great melee weapon of smiting.</p></htmltext>
<tokenext>In the spirit of slashdot , I feel instead of a gun , it should be a + 3 or great melee weapon of smiting .</tokentext>
<sentencetext>In the spirit of slashdot, I feel instead of a gun, it should be a +3 or great melee weapon of smiting.</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060726</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060854</id>
	<title>Not degrading the performance?</title>
	<author>Mysticalfruit</author>
	<datestamp>1257093780000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext>So the synopsis starts by saying it doesn't degrade performance and ends with "it only causes a 6\% drop in performance."  Now, I might be nieve but why can't these memory aligning tricks be done in the kernel naively?</htmltext>
<tokenext>So the synopsis starts by saying it does n't degrade performance and ends with " it only causes a 6 \ % drop in performance .
" Now , I might be nieve but why ca n't these memory aligning tricks be done in the kernel naively ?</tokentext>
<sentencetext>So the synopsis starts by saying it doesn't degrade performance and ends with "it only causes a 6\% drop in performance.
"  Now, I might be nieve but why can't these memory aligning tricks be done in the kernel naively?</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062946</id>
	<title>Re:So ...</title>
	<author>Skjellifetti</author>
	<datestamp>1257102480000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><i>There's actually nine rootkits out there for Linux?</i> <br> <br>

Yes, they are supposed to be pretty scary, too. But what is worse, is that there is a ring 0 rootkit that rules them all.</htmltext>
<tokenext>There 's actually nine rootkits out there for Linux ?
Yes , they are supposed to be pretty scary , too .
But what is worse , is that there is a ring 0 rootkit that rules them all .</tokentext>
<sentencetext>There's actually nine rootkits out there for Linux?
Yes, they are supposed to be pretty scary, too.
But what is worse, is that there is a ring 0 rootkit that rules them all.</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060802</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061834</id>
	<title>fr1st 5top</title>
	<author>Anonymous</author>
	<datestamp>1257097500000</datestamp>
	<modclass>Flamebait</modclass>
	<modscore>-1</modscore>
	<htmltext><A HREF="http://goat.cx/" title="goat.cx" rel="nofollow">Recent a8ticle ^put</a> [goat.cx]</htmltext>
<tokenext>Recent a8ticle ^ put [ goat.cx ]</tokentext>
<sentencetext>Recent a8ticle ^put [goat.cx]</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30066294</id>
	<title>What kind of research is this</title>
	<author>Luke Wilson</author>
	<datestamp>1257073080000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p><div class="quote"><p>The team installed HookSafe on a machine running Ubuntu 8.04, and found the system successfully prevented nine real-world rootkits targeting that platform from installing or hiding themselves.</p></div><p>Of course they didn't detect any rootkits installing themselves, that's exactly what an installed rootkit would prevent them from seeing.</p></div>
	</htmltext>
<tokenext>The team installed HookSafe on a machine running Ubuntu 8.04 , and found the system successfully prevented nine real-world rootkits targeting that platform from installing or hiding themselves.Of course they did n't detect any rootkits installing themselves , that 's exactly what an installed rootkit would prevent them from seeing .</tokentext>
<sentencetext>The team installed HookSafe on a machine running Ubuntu 8.04, and found the system successfully prevented nine real-world rootkits targeting that platform from installing or hiding themselves.Of course they didn't detect any rootkits installing themselves, that's exactly what an installed rootkit would prevent them from seeing.
	</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061610</id>
	<title>Re:Not degrading the performance?</title>
	<author>Anonymous</author>
	<datestamp>1257096720000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p>You might be snow?  And your kernel is na&#239;ve?</p></htmltext>
<tokenext>You might be snow ?
And your kernel is na   ve ?</tokentext>
<sentencetext>You might be snow?
And your kernel is naïve?</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060854</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062996</id>
	<title>Lightweight?  No, thank you.</title>
	<author>Anonymous</author>
	<datestamp>1257102600000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext>But I don't want lightweight protection.  I want a lot of steel and guns.  And armed drones with packet sniffers.  And K-9 units with dowsing rods.</htmltext>
<tokenext>But I do n't want lightweight protection .
I want a lot of steel and guns .
And armed drones with packet sniffers .
And K-9 units with dowsing rods .</tokentext>
<sentencetext>But I don't want lightweight protection.
I want a lot of steel and guns.
And armed drones with packet sniffers.
And K-9 units with dowsing rods.</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061236</id>
	<title>Rootkit hunter</title>
	<author>jDeepbeep</author>
	<datestamp>1257095280000</datestamp>
	<modclass>Informativ</modclass>
	<modscore>4</modscore>
	<htmltext><p><div class="quote"><p>Anyone run into these or have any recommendations of good detection software?</p></div><p> <a href="http://rkhunter.sourceforge.net/" title="sourceforge.net">Rootkit Hunter</a> [sourceforge.net]</p></div>
	</htmltext>
<tokenext>Anyone run into these or have any recommendations of good detection software ?
Rootkit Hunter [ sourceforge.net ]</tokentext>
<sentencetext>Anyone run into these or have any recommendations of good detection software?
Rootkit Hunter [sourceforge.net]
	</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060802</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30065950</id>
	<title>Re:Hmm , is there a reason they didn't use Windows</title>
	<author>Anonymous</author>
	<datestamp>1257071760000</datestamp>
	<modclass>None</modclass>
	<modscore>0</modscore>
	<htmltext><p>Microsoft Research is for all intents and purposes academia without having to beg for funding from random organizations.</p></htmltext>
<tokenext>Microsoft Research is for all intents and purposes academia without having to beg for funding from random organizations .</tokentext>
<sentencetext>Microsoft Research is for all intents and purposes academia without having to beg for funding from random organizations.</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061006</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061964</id>
	<title>Re:I'll take one</title>
	<author>Runaway1956</author>
	<datestamp>1257098160000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p>6\% doesn't sound like much.  But, this is for virtual machines.  By definition, a VM is already handicapped.  Take away 6\% of the performance of Windows 7 inside my existing VM's, and they aren't worth having.  An XP machine may still work alright, but that isn't certain.</p><p>Maybe I just need faster, more powerful hardware, then I won't notice another 6\% decrease.</p></htmltext>
<tokenext>6 \ % does n't sound like much .
But , this is for virtual machines .
By definition , a VM is already handicapped .
Take away 6 \ % of the performance of Windows 7 inside my existing VM 's , and they are n't worth having .
An XP machine may still work alright , but that is n't certain.Maybe I just need faster , more powerful hardware , then I wo n't notice another 6 \ % decrease .</tokentext>
<sentencetext>6\% doesn't sound like much.
But, this is for virtual machines.
By definition, a VM is already handicapped.
Take away 6\% of the performance of Windows 7 inside my existing VM's, and they aren't worth having.
An XP machine may still work alright, but that isn't certain.Maybe I just need faster, more powerful hardware, then I won't notice another 6\% decrease.</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060642</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060998</id>
	<title>Sounds like a root kit.</title>
	<author>Anonymous</author>
	<datestamp>1257094380000</datestamp>
	<modclass>Funny</modclass>
	<modscore>5</modscore>
	<htmltext><p>So this thing acts as a hypervisor and loads its own hooks into the kernel.  Sounds like something a root kit would do.</p><p>It reminds me of one approach to avoid a terrorist attack when flying.  Carry your own bomb onto the plane.  After all, what are the chances that there would be two bombs on the plane?</p></htmltext>
<tokenext>So this thing acts as a hypervisor and loads its own hooks into the kernel .
Sounds like something a root kit would do.It reminds me of one approach to avoid a terrorist attack when flying .
Carry your own bomb onto the plane .
After all , what are the chances that there would be two bombs on the plane ?</tokentext>
<sentencetext>So this thing acts as a hypervisor and loads its own hooks into the kernel.
Sounds like something a root kit would do.It reminds me of one approach to avoid a terrorist attack when flying.
Carry your own bomb onto the plane.
After all, what are the chances that there would be two bombs on the plane?</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062100</id>
	<title>Re:What were the rootkits?</title>
	<author>felipekk</author>
	<datestamp>1257098640000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p>I've installed an Ubuntu 9.04 Server recently and it didn't include the headers by default (neither the source).</p><p>I'm pretty sure it's also the case for 9.10.</p></htmltext>
<tokenext>I 've installed an Ubuntu 9.04 Server recently and it did n't include the headers by default ( neither the source ) .I 'm pretty sure it 's also the case for 9.10 .</tokentext>
<sentencetext>I've installed an Ubuntu 9.04 Server recently and it didn't include the headers by default (neither the source).I'm pretty sure it's also the case for 9.10.</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060994</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061242</id>
	<title>Re:Not degrading the performance?</title>
	<author>moderatorrater</author>
	<datestamp>1257095340000</datestamp>
	<modclass>Informativ</modclass>
	<modscore>1</modscore>
	<htmltext><a href="http://www.schneier.com/blog/archives/2009/11/protecting\_oss.html" title="schneier.com">Schneier's synopsis</a> [schneier.com] is pretty good. Apparently, most hardware only provides page-level memory granularity, whereas protecting these hooks requires byte-level granularity.</htmltext>
<tokenext>Schneier 's synopsis [ schneier.com ] is pretty good .
Apparently , most hardware only provides page-level memory granularity , whereas protecting these hooks requires byte-level granularity .</tokentext>
<sentencetext>Schneier's synopsis [schneier.com] is pretty good.
Apparently, most hardware only provides page-level memory granularity, whereas protecting these hooks requires byte-level granularity.</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060854</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30068414</id>
	<title>Link to the paper</title>
	<author>SiliconEntity</author>
	<datestamp>1257086640000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p><a href="http://discovery.csc.ncsu.edu/pubs/ccs09-HookSafe.pdf" title="ncsu.edu">http://discovery.csc.ncsu.edu/pubs/ccs09-HookSafe.pdf</a> [ncsu.edu]</p><p>[Via <a href="http://www.schneier.com/blog/archives/2009/11/protecting\_oss.html" title="schneier.com">Schneier</a> [schneier.com]]</p></htmltext>
<tokenext>http : //discovery.csc.ncsu.edu/pubs/ccs09-HookSafe.pdf [ ncsu.edu ] [ Via Schneier [ schneier.com ] ]</tokentext>
<sentencetext>http://discovery.csc.ncsu.edu/pubs/ccs09-HookSafe.pdf [ncsu.edu][Via Schneier [schneier.com]]</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30068378</id>
	<title>Re:So ...</title>
	<author>selven</author>
	<datestamp>1257086340000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p>Administratored? I know it's cool to talk about the paper you "authored" and all, but this is getting ridiculous.</p></htmltext>
<tokenext>Administratored ?
I know it 's cool to talk about the paper you " authored " and all , but this is getting ridiculous .</tokentext>
<sentencetext>Administratored?
I know it's cool to talk about the paper you "authored" and all, but this is getting ridiculous.</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062722</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30063180</id>
	<title>Re:Not degrading the performance?</title>
	<author>raddan</author>
	<datestamp>1257103260000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext>Overlooking the funny spelling errors, there is no reason why the kernel can't do this natively.  It just doesn't at the moment.</htmltext>
<tokenext>Overlooking the funny spelling errors , there is no reason why the kernel ca n't do this natively .
It just does n't at the moment .</tokentext>
<sentencetext>Overlooking the funny spelling errors, there is no reason why the kernel can't do this natively.
It just doesn't at the moment.</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060854</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061080</id>
	<title>Re:Can we learn lessons from mainframe VMs?</title>
	<author>NotBornYesterday</author>
	<datestamp>1257094620000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext>How many rootkits were running around back then?</htmltext>
<tokenext>How many rootkits were running around back then ?</tokentext>
<sentencetext>How many rootkits were running around back then?</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060928</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061460</id>
	<title>Re:So ...</title>
	<author>Jazz-Masta</author>
	<datestamp>1257096240000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p>The summary was incorrect - corrected below:</p><p><div class="quote"><p> The team installed HookSafe on a machine running Windows Vista, and found the system successfully prevented 126, 000 real-world rootkits targeting that platform from installing or hiding themselves.</p></div></div>
	</htmltext>
<tokenext>The summary was incorrect - corrected below : The team installed HookSafe on a machine running Windows Vista , and found the system successfully prevented 126 , 000 real-world rootkits targeting that platform from installing or hiding themselves .</tokentext>
<sentencetext>The summary was incorrect - corrected below: The team installed HookSafe on a machine running Windows Vista, and found the system successfully prevented 126, 000 real-world rootkits targeting that platform from installing or hiding themselves.
	</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060802</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061884</id>
	<title>Not more secure</title>
	<author>ScaledLizard</author>
	<datestamp>1257097740000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext>If I were insane with security, I'd still prefer booting a live distro from CD to booting an OS from disk, as any infection would be removed when powering down. But I suppose that this rootkit protection might add to the security of such a CD<nobr> <wbr></nobr>...</htmltext>
<tokenext>If I were insane with security , I 'd still prefer booting a live distro from CD to booting an OS from disk , as any infection would be removed when powering down .
But I suppose that this rootkit protection might add to the security of such a CD .. .</tokentext>
<sentencetext>If I were insane with security, I'd still prefer booting a live distro from CD to booting an OS from disk, as any infection would be removed when powering down.
But I suppose that this rootkit protection might add to the security of such a CD ...</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30069700</id>
	<title>Re:Not degrading the performance?</title>
	<author>johanatan</author>
	<datestamp>1257100560000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext>Actually, I think he meant Neve as in Neve Campbell.</htmltext>
<tokenext>Actually , I think he meant Neve as in Neve Campbell .</tokentext>
<sentencetext>Actually, I think he meant Neve as in Neve Campbell.</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061088</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060726</id>
	<title>Re:I'll take one</title>
	<author>NoYob</author>
	<datestamp>1257093180000</datestamp>
	<modclass>Funny</modclass>
	<modscore>3</modscore>
	<htmltext><p><div class="quote"><p>I would gladly give up 6\% of the performance of my machine if I could be safe from rootkits.  Now queue the "those who would give up system performance for system security deserve neither" posts.</p></div><p>Damn straight! The same goes for guns! It should be a law that computer admins have to carry guns in order to protect their machines! Have a computer in your house? Well then, you are required to have a gun by your machine - even if you live in NY City!</p></div>
	</htmltext>
<tokenext>I would gladly give up 6 \ % of the performance of my machine if I could be safe from rootkits .
Now queue the " those who would give up system performance for system security deserve neither " posts.Damn straight !
The same goes for guns !
It should be a law that computer admins have to carry guns in order to protect their machines !
Have a computer in your house ?
Well then , you are required to have a gun by your machine - even if you live in NY City !</tokentext>
<sentencetext>I would gladly give up 6\% of the performance of my machine if I could be safe from rootkits.
Now queue the "those who would give up system performance for system security deserve neither" posts.Damn straight!
The same goes for guns!
It should be a law that computer admins have to carry guns in order to protect their machines!
Have a computer in your house?
Well then, you are required to have a gun by your machine - even if you live in NY City!
	</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060642</parent>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061168</id>
	<title>How well would this play with Anti Virus programs?</title>
	<author>Viol8</author>
	<datestamp>1257094980000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext><p>Anti Virus programs are effectively rootkits - at least for Windows - as they bury themselves deep in the OS and redirect various kernel hooks to themselves. I can see potential problems if this type of solution ever becomes common though I suppose you could argue that you shouldn't need anti virus protection if you have this hypervisor. And with both Linux and Windows how would it take into account someone attempting to load a driver/module from userland?</p></htmltext>
<tokenext>Anti Virus programs are effectively rootkits - at least for Windows - as they bury themselves deep in the OS and redirect various kernel hooks to themselves .
I can see potential problems if this type of solution ever becomes common though I suppose you could argue that you should n't need anti virus protection if you have this hypervisor .
And with both Linux and Windows how would it take into account someone attempting to load a driver/module from userland ?</tokentext>
<sentencetext>Anti Virus programs are effectively rootkits - at least for Windows - as they bury themselves deep in the OS and redirect various kernel hooks to themselves.
I can see potential problems if this type of solution ever becomes common though I suppose you could argue that you shouldn't need anti virus protection if you have this hypervisor.
And with both Linux and Windows how would it take into account someone attempting to load a driver/module from userland?</sentencetext>
</comment>
<comment>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061044</id>
	<title>Re:I'll take one</title>
	<author>NotBornYesterday</author>
	<datestamp>1257094500000</datestamp>
	<modclass>None</modclass>
	<modscore>1</modscore>
	<htmltext>I'd be tempted to shoot the computers.</htmltext>
<tokenext>I 'd be tempted to shoot the computers .</tokentext>
<sentencetext>I'd be tempted to shoot the computers.</sentencetext>
	<parent>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060726</parent>
</comment>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_32</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062946
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060802
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_25</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30070224
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060896
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_24</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062936
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060998
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_15</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30069700
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061088
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060854
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_8</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062100
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060994
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060896
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_30</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30063406
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060642
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_16</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061858
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060726
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060642
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_18</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30063938
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060998
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_23</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30063356
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061808
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060802
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_7</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061030
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060854
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_13</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061460
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060802
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_6</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062210
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060642
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_36</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061610
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060854
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_3</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30063180
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060854
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_2</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061242
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060854
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_29</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30068806
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060642
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_33</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061964
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060642
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_28</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30072494
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060802
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_10</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062576
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061274
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060998
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_5</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30069414
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060896
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_34</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30065856
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060854
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_1</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062350
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061236
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060802
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_27</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061384
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060896
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_31</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30081712
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060744
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060642
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_17</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061360
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061168
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_19</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30066192
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061088
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060854
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_22</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30063202
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061080
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060928
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_14</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061044
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060726
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060642
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_9</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30063154
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060802
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_21</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062744
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061808
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060802
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_20</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30068378
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062722
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061332
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061040
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060802
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_11</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062066
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060994
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060896
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_4</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062636
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060998
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_35</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30065950
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061006
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_0</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30064122
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060928
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_12</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062704
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060642
</commentlist>
</thread>
<thread>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#thread_09_11_11_1517233_26</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061860
http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060896
</commentlist>
</thread>
<conversation>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#conversation09_11_11_1517233.9</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061228
</commentlist>
</conversation>
<conversation>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#conversation09_11_11_1517233.3</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060802
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061808
--http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30063356
--http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062744
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061460
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062946
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30063154
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30072494
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061040
--http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061332
---http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062722
----http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30068378
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061236
--http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062350
</commentlist>
</conversation>
<conversation>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#conversation09_11_11_1517233.1</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061756
</commentlist>
</conversation>
<conversation>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#conversation09_11_11_1517233.12</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060928
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061080
--http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30063202
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30064122
</commentlist>
</conversation>
<conversation>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#conversation09_11_11_1517233.4</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061884
</commentlist>
</conversation>
<conversation>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#conversation09_11_11_1517233.2</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060736
</commentlist>
</conversation>
<conversation>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#conversation09_11_11_1517233.7</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060854
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061030
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061242
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061610
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30065856
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30063180
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061088
--http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30066192
--http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30069700
</commentlist>
</conversation>
<conversation>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#conversation09_11_11_1517233.5</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060998
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062636
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061274
--http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062576
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30063938
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062936
</commentlist>
</conversation>
<conversation>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#conversation09_11_11_1517233.8</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060642
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061964
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060726
--http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061044
--http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061858
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062210
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060744
--http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30081712
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062704
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30068806
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30063406
</commentlist>
</conversation>
<conversation>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#conversation09_11_11_1517233.10</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061168
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061360
</commentlist>
</conversation>
<conversation>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#conversation09_11_11_1517233.6</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060896
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30070224
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061384
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30060994
--http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062066
--http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062100
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061860
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30069414
</commentlist>
</conversation>
<conversation>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#conversation09_11_11_1517233.0</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30062996
</commentlist>
</conversation>
<conversation>
	<id>http://www.semanticweb.org/ontologies/ConversationInstances.owl#conversation09_11_11_1517233.11</id>
	<commentlist>http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30061006
-http://www.semanticweb.org/ontologies/ConversationInstances.owl#comment09_11_11_1517233.30065950
</commentlist>
</conversation>
