Basics of Making a Rootkit – From syscall to hook
Submitted two days ago:<p><a href="https://news.ycombinator.com/item?id=13243654" rel="nofollow">https://news.ycombinator.com/item?id=13243654</a><p>with (AFAICT) the exact same URL.  Why didn't the dupe detector catch this?