• 1 Post
  • 109 Comments
Joined 1 year ago
cake
Cake day: June 16th, 2023

help-circle









  • Saved you a click: Exploit requires attacker to already have an account in the local administrators group, and appears to only allow local admin privileges anyway.

    You can remap the C:\ drive (including the OS files in system and windows folders) to a location you already control, with exploited system files and dlls, rather than having to go through UAC and confirm you want to use admin privileges to replace them in-situ.

    Microsoft doesn’t consider this an actual vuln because local admins are already defacto trusted and able to use their admin status to do all this anyway. They could just disable UAC locally anyway.


  • With NAT existing, I’m not sure there’s a significant reason to switch anymore.

    Plus the “surprise” privacy and security benefits of just… not having every network connected device directly addressable by anyone else on the global network. The face of the internet and networking in general, plus the security and safety concerns around it, have changed dramatically since v6 was first created.