4 ms·

>Something like "ctrl-alt-delete" for Windows (I'm not sure if it's un-catchable, but you got an idea) or even better some unused key like pause/break. I think

by jaclaz 9y ago

>Something like "ctrl-alt-delete" for Windows (I'm not sure if it's un-catchable, but you got an idea) or even better some unused key like pause/break. I think that even that is catchable (if needed), at least on old Windows XP Embedded, if you used minlogon (which happened very often) you lost ctrl+alt+del access to Task Manager, but there was a third-party service to restore the "hook": http://www.mp3car.com/forum/mp3car-technical-software/software-software-development/operating-system-optimization/winnt-based/39406-fix-ctrl-alt-del-with-minlogon http://www.mp3car.com/forum/mp3car-technical-software/softwa...

gruez 9y ago
but does it suppress the real thing? otherwise the user is going to see the (real) windows security dialog, followed by your fake one after they exited the real one.
- jaclaz 9y ago
  Really cannot remember how the mentioned little program worked with the "real" Winlogon, i.e. if it managed to hook "before" it the key sequence. Anyway there are other ways, here is one: http://www.oblita.com/interception.html http://www.oblita.com/interception.html about midpage there is a sample to "intercept and block" the sequence.
  - gruez 9y ago
    but that requires a kernel mode component, and if you have kernel access all bets are off. for instance, you can directly patch out the login screen (which is in userspace) to steal the password for you.
    - jaclaz 9y ago
      Sure, but I bet that some clever folks may well "disguise" such a kernel component into (say) an update or a new install in such a way that the user is tricked as well to allow it. No idea anyway (since the topic is on iOS) how that OS would behave and what could be the equivalent of a Ctrl+Alt+Del key sequence on a keyboardless device such as a iPhone or iPad.
      - a_t48 9y ago
        If you've got a kernel level hack already, just use a keylogger.

by jaclaz 9y ago

gruez 9y ago

but does it suppress the real thing? otherwise the user is going to see the (real) windows security dialog, followed by your fake one after they exited the real one.

jaclaz 9y ago
Really cannot remember how the mentioned little program worked with the "real" Winlogon, i.e. if it managed to hook "before" it the key sequence. Anyway there are other ways, here is one: http://www.oblita.com/interception.html http://www.oblita.com/interception.html about midpage there is a sample to "intercept and block" the sequence.
- gruez 9y ago
  but that requires a kernel mode component, and if you have kernel access all bets are off. for instance, you can directly patch out the login screen (which is in userspace) to steal the password for you.
  - jaclaz 9y ago
    Sure, but I bet that some clever folks may well "disguise" such a kernel component into (say) an update or a new install in such a way that the user is tricked as well to allow it. No idea anyway (since the topic is on iOS) how that OS would behave and what could be the equivalent of a Ctrl+Alt+Del key sequence on a keyboardless device such as a iPhone or iPad.
    - a_t48 9y ago
      If you've got a kernel level hack already, just use a keylogger.