3 ms·
Yeah I wasn't agreeing with that either. I didn't interpret OP's comment like that. I think he was saying you can't enforce the boundary at all even if users d
by IshKebab 2y ago
Yeah I wasn't agreeing with that either.
I didn't interpret OP's comment like that. I think he was saying you can't enforce the boundary at all even if users don't get tricked.
That's true on Linux because the sudo UI can trivially be MitM'd by malware. You can't do that on Windows so trivially.
- shakna 2y agoThat was doable, and how it worked, under Windows until a few weeks ago [0]. [0] https://cyberdom.blog/abusing-the-windows-update-stack-to-gain-system-access-cve-2025-21204/ https://cyberdom.blog/abusing-the-windows-update-stack-to-ga...