Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.advocacy > #473488 > unrolled thread

"Secure" modern Windows

Back to article view | Back to comp.os.linux.advocacy

Contents

  "Secure" modern Windows RonB <ronb02NOSPAM@gmail.com> - 2018-10-25 02:37 +0000
    Re: "Secure" modern Windows Hadron Quark <hadronquark@gmail.com> - 2018-10-25 04:41 +0200
      Re: "Secure" modern Windows Snit <usenet@gallopinginsanity.com> - 2018-10-24 20:20 -0700
    Who is using Microsoft Windows, Henpeck Husband? Simon bar Sinister <john.h.gohde@gmail.com> - 2018-10-24 21:21 -0700
      Re: Who is using Microsoft Windows, Henpeck Husband? Steve Carroll <frelwizzen@gmail.com> - 2018-10-24 22:21 -0700

#473488 — "Secure" modern Windows

Maybe not so secure?

~~
Worrying Windows 10 wrecking-ball weapon weirdly wanders wildly on worldwide 
web

Zero-day crash'n'pwn exploit for Microsoft's latest OS disclosed, no 
official patch available (yet)

A skilled Microsoft bug hunter with a penchant for public disclosures via 
Twitter has openly floated a new Windows 10 zero-day flaw.

The researcher, who goes by the pseudonym SandboxEscaper, says the bug is 
present in the code handling advanced local procedure calls (ALPCs). It can 
be exploited by a malicious logged-in user or malware on an already infected 
computer to arbitrarily delete or tamper with anything from application .dll 
files to critical system components.

According to SandboxEscaper, the vulnerability is similar to the local 
privilege escalation flaw posted back in August, with the added twist of the 
attacker now being able to wipe files.

The researcher has provided a proof-of-concept on GitHub and tweeted out a 
link earlier this week – see below. WARNING: it will crash your Windows 10 
PC into recovery mode, and require you to revert your filesystem back to a 
previous good backup. Don't touch it unless you know what you're doing.
...
~~
https://www.theregister.co.uk/2018/10/24/windows_0day_twitter/

What fun it is using Windows.

-- 
The more I see of Windows, the more I like Linux.

[toc] | [next] | [standalone]

#473490

RonB <ronb02NOSPAM@gmail.com> writes:

> Maybe not so secure?
>
> ~~


,----
| The researcher, who goes by the pseudonym SandboxEscaper, says the bug is 
| present in the code handling advanced local procedure calls (ALPCs). It can 
| be exploited by a malicious logged-in user or malware on an already infected 
| computer to arbitrarily delete or tamper with anything from application .dll 
| files to critical system components.
`----

You're too dumb to understand what this says.

[toc] | [prev] | [next] | [standalone]

#473506

On 10/24/18 7:41 PM, Hadron Quark wrote:
> RonB <ronb02NOSPAM@gmail.com> writes:
> 
>> Maybe not so secure?
>>
>> ~~
> 
> 
> ,----
> | The researcher, who goes by the pseudonym SandboxEscaper, says the bug is
> | present in the code handling advanced local procedure calls (ALPCs). It can
> | be exploited by a malicious logged-in user or malware on an already infected
> | computer to arbitrarily delete or tamper with anything from application .dll
> | files to critical system components.
> `----
> 
> You're too dumb to understand what this says.
> 

RonB lashes out in insecurity.

-- 
Personal attacks from those who troll show their own insecurity. They 
cannot use reason to show the message to be wrong so they try to feel 
somehow superior by attacking the messenger.

They cling to their attacks and ignore the message time and time again.

<https://youtu.be/H4NW-Cqh308>

[toc] | [prev] | [next] | [standalone]

#473517 — Who is using Microsoft Windows, Henpeck Husband?

On Wednesday, October 24, 2018 at 10:37:19 PM UTC-4, RonB wrote:
> Maybe not so secure?
> 
> ~~
> Worrying Windows 10 wrecking-ball weapon weirdly wanders wildly on worldwide 
> web
> 
> Zero-day crash'n'pwn exploit for Microsoft's latest OS disclosed, no 
> official patch available (yet)
> 
> A skilled Microsoft bug hunter with a penchant for public disclosures via 
> Twitter has openly floated a new Windows 10 zero-day flaw.
> 
> The researcher, who goes by the pseudonym SandboxEscaper, says the bug is 
> present in the code handling advanced local procedure calls (ALPCs). It can 
> be exploited by a malicious logged-in user or malware on an already infected 
> computer to arbitrarily delete or tamper with anything from application .dll 
> files to critical system components.
> 
> According to SandboxEscaper, the vulnerability is similar to the local 
> privilege escalation flaw posted back in August, with the added twist of the 
> attacker now being able to wipe files.
> 
> The researcher has provided a proof-of-concept on GitHub and tweeted out a 
> link earlier this week – see below. WARNING: it will crash your Windows 10 
> PC into recovery mode, and require you to revert your filesystem back to a 
> previous good backup. Don't touch it unless you know what you're doing.



Who is using Microsoft Windows, Henpeck Husband?

[toc] | [prev] | [next] | [standalone]

#473523 — Re: Who is using Microsoft Windows, Henpeck Husband?

On Wednesday, October 24, 2018 at 9:22:01 PM UTC-7, Simon bar Sinister wrote:
> On Wednesday, October 24, 2018 at 10:37:19 PM UTC-4, RonB wrote:
> > Maybe not so secure?
> > 
> > ~~
> > Worrying Windows 10 wrecking-ball weapon weirdly wanders wildly on worldwide 
> > web
> > 
> > Zero-day crash'n'pwn exploit for Microsoft's latest OS disclosed, no 
> > official patch available (yet)
> > 
> > A skilled Microsoft bug hunter with a penchant for public disclosures via 
> > Twitter has openly floated a new Windows 10 zero-day flaw.
> > 
> > The researcher, who goes by the pseudonym SandboxEscaper, says the bug is 
> > present in the code handling advanced local procedure calls (ALPCs). It can 
> > be exploited by a malicious logged-in user or malware on an already infected 
> > computer to arbitrarily delete or tamper with anything from application .dll 
> > files to critical system components.
> > 
> > According to SandboxEscaper, the vulnerability is similar to the local 
> > privilege escalation flaw posted back in August, with the added twist of the 
> > attacker now being able to wipe files.
> > 
> > The researcher has provided a proof-of-concept on GitHub and tweeted out a 
> > link earlier this week – see below. WARNING: it will crash your Windows 10 
> > PC into recovery mode, and require you to revert your filesystem back to a 
> > previous good backup. Don't touch it unless you know what you're doing.
> 
> 
> 
> Who is using Microsoft Windows, Henpeck Husband?



That lame duck update system failed over and over again. No one here has ever read my script, much less found a bug; still, in the dark recesses of my brain, I'm thinking, "That's wrong, how embarrassing", but nobody knows that. Given how often it seems that Klaus Schadenfreude's post is some skew of a quote Jonas Eklundh made which had been a beating on Klaus Schadenfreude for something he did which was ill-considered/false/etc... its truly a regular gesture of Klaus Schadenfreude's ever-present butthurt for having been so frequently pwned. Klaus Schadenfreude does not know if there is a encumbered open source that promotes PEE. 

-- 
Puppy Videos!
https://youtu.be/Z5wo5aE7MUk
https://redd.it/6sfkup
Jonas Eklundh

[toc] | [prev] | [standalone]

Back to top | Article view | comp.os.linux.advocacy

csiph-web