5 ms·
> There’s no patches, it’s a zero day. Seems that MS just released articles on how to prevent it but no update/patch. Perhaps it's hard to fix, i.e., too many
by woliveirajr 5y ago
> There’s no patches, it’s a zero day.
Seems that MS just released articles on how to prevent it but no update/patch.
Perhaps it's hard to fix, i.e., too many things on windows rely on it?
- withinboredom 5y agoOr perhaps, once someone installs untrusted software in the first place, you’re screwed anyway? This is security 101. AFAIK, you can login as a local admin since forever and it’s never been fixed. I just used it recently to access a deceased relative’s computer.
- user-the-name 5y agoEvery computer spends pretty much every hour of every day running untrusted software. There is nothing more common than running untrusted software. This kind of attitude is completely useless.
- withinboredom 5y agoI wasn’t being literal. To clarify, I meant some random person installing some random software without your knowledge type of untrusted software.
- selfhoster11 5y agoAKA JavaScript on websites? Sure, it's sandboxed to the Moon, but it's still random people "installing" software on your computer.
- deleted 5y ago[deleted]
- londons_explore 5y agoI was surprised to find that a modern windows 10 machine (with all default security options) could have the user password bypassed easily with a Windows setup USB. I could then read all the user's documents. I thought the point of disk encryption and secure boot was to prevent that. Yet somehow the hole of allowing Windows setup to give you a privileged command prompt with a decrypted disk was never closed...
- coliveira 5y agoI guess Windows administrators rely on this. If they close this issue, there will be a huge list of complains that they don't want to deal with.
- withinboredom 5y agoThis is true of just about any OS though. Linux and OSX has/had single user mode, for example.
- IggleSniggle 5y agoI don’t understand. What’s the point of having an encrypted disk if it can be decrypted by any old USB-loaded OS?
- selfhoster11 5y agoA user password doesn't enable encryption. Bitlocker or another Full Disk Encryption solution is what you would want to use. If you can see the data, that means it's not encrypted.
- IggleSniggle 5y agoBut doesn’t Windows 10 ship with device encryption? Ie full disk encryption? I thought that’s exactly what this was, which is what I’m not understanding. How can you see data if the device is encrypted?
- ptx 5y agoIf all the OS security measures are useless in the face of untrusted software, why were they introduced? Should we just run Windows 98 and FAT32 on our servers since it's apparently basic security knowledge that Windows NT's system of user accounts and permissions doesn't work?
- wongarsu 5y agoWindows is a multiuser system and tries to give you a reliable security barrier between two (non-admin) users. And at least since Windows Vista it puts some effort into preventing non-elevated software from gaining admin rights, limiting the amount of damage it can do somewhat. Of course in reality installing any untrusted software on a computer that's not airgapped from everything you care about isn't safe. But that doesn't mean we shouldn't at least try to give better security guarantees.
- bottled_poe 5y agoMy first thought too. Too many layers upon layers of technical debt to deploy a timely patch.