teh_slayer
11-05-2002, 02:13 PM
Anyone thought about using SNMP to scan your boxes memory from another machine? There are plenty of fairly easy to use snmp polling techniques that you could possibly employ to scan eqgame.exe from a remote server.
The point of this is, all network virus scanners use this method, and if the sony people actually manage to start watching for memory reads, the only thing that would be reading the memory would be the SNMP daemon. Plus, this would give you the option to scan whole blocks, and process it on the SNMP server side, removing the single target seek & destroy method currently used.
Just seems like a fairly safe way to grab chunks of memory with a very common tool. You remove any fingerprint your programs might have on the client, replacing it with the SNMP daemon's. It would be greatly overstepping their bounds if they decided to track the SNMP daemon's activities outside of their own program.
Just a thought...
The point of this is, all network virus scanners use this method, and if the sony people actually manage to start watching for memory reads, the only thing that would be reading the memory would be the SNMP daemon. Plus, this would give you the option to scan whole blocks, and process it on the SNMP server side, removing the single target seek & destroy method currently used.
Just seems like a fairly safe way to grab chunks of memory with a very common tool. You remove any fingerprint your programs might have on the client, replacing it with the SNMP daemon's. It would be greatly overstepping their bounds if they decided to track the SNMP daemon's activities outside of their own program.
Just a thought...