http://zqktlw5bf6oycxq6qod452xnvdfcqhfwliz54bkul736g6b454jrk2ad.onion/wiki/index.php?title=Intrusive_Surveillance&action=edit
If you intend to audit your machine while it's live, the very first thing you need to do is ensure that your kernel hasn't been modified via a rogue driver module. While lsmod will list loaded modules, it is possible (and quite trivial) to remove module names from this list while keeping the module in the kernel. For this reason, if you are concerned about local surveillance, you are advised to build a kernel without module support (preferably with grsec , which adds...