One other point not mentioned, is copying 4GiB of data across a network does take a bit of time, over the internet even longer. This link https://releases.ubunt

One other point not mentioned, is copying 4GiB of data across a network does take a bit of time, over the internet even longer. This link https://releases.ubuntu.com/21.10/ubuntu-21.10-desktop-amd64.iso https://releases.ubuntu.com/21.10/ubuntu-21.10-desktop-amd64... is to a 2.9GB file so you can see how long it will take to download 4GiB over your internet connection. There is also the point on ASLR making life difficult, well if ASLR is switched on, there are a number of other options which may be also switched on in that part of the system, eg Control Flow Guard, DEP (been around for a couple of decades now), forced ASLR, bottoms up ASLR, High Entropy (more useful if you have shed loads of ram installed than minimum amounts), SEHOP (http://www.uninformed.org/?v=5&a=2&t=txt http://www.uninformed.org/?v=5&a=2&t=txt) and Validate Heap integrity which are all on by default now a days in the systems I have seen. Then there is group policy where in Pro or above, you can control what programs run, in home you can add some of the group policy reg keys and get the same functionality when the functionality exists in the dll's. It reminds me of the bug where you could use notepad to pop a shell, but I'd be interested to see if this would still work with core isolation switched on, Defender Application Guard switched on to sandbox different apps, not just Edge. The number of installers for various apps which dont handle Ransomware Protection aka Controlled Folder Access being switched on, even some big names like Dell's Data Vault havent got that sorted yet, but I still think the best way to hack a system is the old way and get them to download and install an app which can run malicious software or become malicious like exploiting macro functionality because who even configures their firewalls to block anything by default from leaving your machine or network or router? Its such a pain configuring that side of things, exploiting human behaviour aka laziness is something you can count on. Its worth reminding ourselves about Stuxnet, they still havent caught those people, but lots of assumptions exist. https://www.youtube.com/watch?v=Fqk_VUMzY_M https://www.youtube.com/watch?v=Fqk_VUMzY_M https://www.youtube.com/watch?v=DDH4m6M-ZIU https://www.youtube.com/watch?v=DDH4m6M-ZIU https://www.youtube.com/watch?v=CS01Hmjv1pQ https://www.youtube.com/watch?v=CS01Hmjv1pQ Its sheer size meant AV companies spent over a year reverse engineering it to find out if it was even a virus! Not something a lowly individual could do, but a team of crack coders might. And a little reminder, when is a false positive not a false positive? https://www.theguardian.com/technology/2014/may/06/antivirus-software-fails-catch-attacks-security-expert-symantec https://www.theguardian.com/technology/2014/may/06/antivirus...