4 ms·
this LPE would allow anyone to install a kext rootkit on the machine. how is that not serious?
by benwilber0 9y ago
this LPE would allow anyone to install a kext rootkit on the machine. how is that not serious?
- ryanlol 9y agoWhy is that significantly more serious than them running any other backdoor as a normal user? I don't understand the threat model here, it is always completely unreasonable to expect that an attacker wouldn't easily be able to escalate privileges locally in a multi-user system.