3 ms·
Reminds me of a Coding Horror (?) story where a client kept asking the developer to have their app window be on top (most visible.) Poor developer kept trying t
by AceJohnny2 5y ago
Reminds me of a Coding Horror (?) story where a client kept asking the developer to have their app window be on top (most visible.) Poor developer kept trying to explain that whatever method they used to be on top, anyone else could use to be also on top of their app.
Anyways, there is no general heuristic to distinguish a good actor trying to prove their legitimacy from a bad actor trying to fake legitimacy. This is the essence of parasitism.
- bluedino 5y agoClose - Raymond Chen https://devblogs.microsoft.com/oldnewthing/20110310-00/?p=11253 https://devblogs.microsoft.com/oldnewthing/20110310-00/?p=11...
- kryogen1c 5y agothis post is a treasure, thanks for sharing. walls and ladders - ill remember that.
- hoseja 5y agoHe also calls Windows security an "airtight hatch" and I laugh at the hubris.
- Stratoscope 5y agoNot really. Here is what he actually wrote: https://devblogs.microsoft.com/oldnewthing/20060508-22/?p=31283 https://devblogs.microsoft.com/oldnewthing/20060508-22/?p=31... He doesn't quite come out and say what "being on the other side of this airtight hatchway" means - it appears only in the title. But the post makes it clear what it alludes to: if you're already in a position to execute arbitrary code on the target machine in the security context you want, then you don't need to jump through further hoops, because you're already there.
- rblatz 5y agoIt's a Hitchhikers Guide to the Galaxy reference.
- AceJohnny2 5y agoThat's a much better written (and backed up) story than the one I remember, which I recall being in the Coding Horror "fireside tale" style. Maybe Raymond's was the original!