4 ms·
Well, who is the target? Corporate and government customers are obviously important especially when we consider the various cyberwars going on and how much priv
by drzaiusapelord 11y ago
Well, who is the target? Corporate and government customers are obviously important especially when we consider the various cyberwars going on and how much private and trusted data these companies have on us. Priv escalations are scary in my world. In the world of grandma's vacation photos? Not so much.
This is a major, major vulnerability, no doubt about it. Shame TC has a hackey Windows driver to make its pseudo-drive features work. Anything that installs a driver is dangerous in the world of Windows as it has high level permissions. I imagine organizations with strong security policies wouldn't run this and instead just run some PGP variant that doesn't use any customized Windows drivers.
>I don't even have non privileged users on my windows machine.
Technically, you do if you have the UAC enabled. You're only really an admin after UAC runs, at least in most cases. From what I'm reading this should work around he UAC if the driver is running at SYSTEM level.
- randyrand 11y ago>Technically, you do if you have the UAC enabled. Interesting. Makes sense.