3 ms·
I am not convinced. If your software is secured with any sort of key then you can break this with brute force also. All other attempts to prevent unauthorized a
by c22 6y ago
I am not convinced. If your software is secured with any sort of key then you can break this with brute force also. All other attempts to prevent unauthorized access are applications of varying degrees of obfuscation and indirection, the same as in physical lock design.
- anyfoo 6y agoThat is not how privilege boundaries work.
- c22 6y agoThen how do explain privilege escalation attacks other than as a user discovering a path to elevated privileges that was not anticipated by the designers? Can't you "brute force" even the most theoretically rock solid privilege boundary by simply attaching your own computer to the memory in question?
- anyfoo 6y ago> other than as a user discovering a path to elevated privileges that was not anticipated by the designers Most of the time, a barrier to elevated privileges that was not correctly implemented, i.e. a bug, not anything the designer did not anticipate. > Can't you "brute force" even the most theoretically rock solid privilege boundary by simply attaching your own computer to the memory in question? So? Does that mean it's not worth looking at the paths where the attacker does not have physical access of the machine that sits in some data center's secured basement?