3 ms·
> To perform that restart, the driver injected code into a privileged Windows process and then ran that code using an APC—a technique lifted straight from malwa
by hactually 8y ago
> To perform that restart, the driver injected code into a privileged Windows process and then ran that code using an APC—a technique lifted straight from malware.
> Why Huawei chose this approach is not immediately clear, as Windows has as a built-in feature the ability to restart crashed services. There's no need for an external watchdog.
Yes. How weird. An unusual and vulnerable technique was used that also gave plausible deniability?
- mises 8y agoGee, you aren't implying that Huawei would do something bad, are you? You aren't implying that they don't take their user's security seriously, are you? You aren't implying that they could be dropping (very sloppy) back doors into stuff, possibly at the behest of Beijing, are you? /s