Microsoft waited 6 months to patch actively exploited admin-to-kernel vulnerability

PLUS: NSA shares cloud security tips; Infosec training for Jordanian women; Critical vulnerabilities

RavuAlHemio 64 points 2 years ago

Doesn’t having admin privileges mean you can load any driver into the kernel anyway, including blatantly malicious drivers?

save

path: 0 8370840, hotness: undefined, score: 64, children: 13

henfredemars 25 points 2 years ago

I'm not sure that's necessarily true with enforcement of driver signing.

The latest OS kernels typically make some effort to resist arbitrary code injection even by the system administrator and sometimes goes even further against an attacker with a read/write primitive on the kernel. Linux with secure boot will refuse to load unsigned kernel modules for example.

save

path: 0 8370840 8371472, hotness: undefined, score: 25, children: 8

hddsx 15 points 2 years ago

Why’s that? I thought admin could override that

save

path: 0 8370840 8371472 8371595, hotness: undefined, score: 15, children: 7

runefehay 14 points 2 years ago

It is part of the SSSCA / CBDTPA / "Trusted" computing initiative. The large corporations want to control what you are allowed to do with your computer. This is where the phrase "digital rights management" comes from.

save

path: 0 8370840 8371472 8371595 8372394, hotness: undefined, score: 14, children: 0

Our Rules