2 ms·
So if someone already has physical access to a machine they can get remote access to the machine? Even ignoring the fact that they already had access, they sell
by donatj 3y ago
So if someone already has physical access to a machine they can get remote access to the machine? Even ignoring the fact that they already had access, they sell devices that emulate a keyboard/mouse/monitor that can already do this undetectably.
- catlifeonmars 3y agoI think there’s an interesting argument to be made about reducing the attack surface area for userspace though. A really naive thing to do would be to run any shell (any program really) in its own isolated environment. The barriers to this aren’t really technical IMO, mostly they are UX barriers. It needs good OS support, and there’s not really a developer oriented OS with smooth mechanisms for escalating and de-escalating privileges at a granular level (sudo ain’t it lol). An ideal development environment would: (1) allow for executing unsigned/self-signed code without jumping through hoops or relying on a 3rd party or App Store, (2) allow for escalation and automatic descalation of fine-grained privileges with native UX for grants (LittleSnitch on macOS has a good design for this specifically for networking IMO —- one could imagine extending this to the file system). There are plenty of systems that have some aspects of these, but I have not seen both, at least not in a form accessible enough to be ubiquitous in 2023.
- nikanj 3y agoCode execution leads to code execution. CVE score 9.98 confirmed by Mitre
- jeremyjh 3y agoOr someone with physical access for five minutes can set themselves with a lifetime subscription to whatever you may have thats worth stealing on that machine in the future, without installing anything that can be detected as malware.