2 ms·
RTFA. "This 'plausible exploit' has to be some way of getting ordinary Windows users to run the code and become compromised, it's not an experienced Linux user
by JonnieCache 14y ago
RTFA.
"This 'plausible exploit' has to be some way of getting ordinary Windows users to run the code and become compromised, it's not an experienced Linux user becoming root and subverting Windows on their local box."
- btilly 14y agoI do not think that you understand the suggested attack scenario. Pen testers are already familiar with the idea of leaving compromised USBs in a parking lot. A lot of normal users will pick one up, carry it in, and plug it into their computer to see what's on it. If the USB key will send your data to a third party, without user understanding or intervention, then that's a security problem.
- belorn 14y agoThinking about it, here is a bit more insidious (and complex) method: The usb drive install a linux system over the previous windows installation. Then it install a VM, and set it to run the old windows installation. Have boot set to quiet and on startup, load up the VM. While a bit slower, you now have hypervisor control over the machine, and the user can install how much anti-virus and anti-rootkits they want. You effectively eradicated the secure boot scheme with the help of the Red Hat key.