Email or username:

Password:

Forgot your password?
r000t's posts Post Back to profile
Top-level
Iska :emacs_thinking:​ :guix:

@AgreeableLandscape @r000t
sudo modprobe anti~christ~cheat

Just a UAC prompt

Only true when you use admin(root) account.

27 Aug 2022 at 11:10 | Wall-to-wall | Open on mstdn.starnix.network
5 comments
DELETED

@iska @r000t yeah, but this specific vulrnability hinges on not requiring UAC authorisation to install the anticheat. Like, if you need to sudo it, it's a lot less of a threat.

27 Aug 2022 at 11:27 | Open on mastodon.social
r000t

@AgreeableLandscape
There's a higher level than any interactive administrator account on a Windows system, called NT AUTHORITY\SYSTEM, and this is the level drivers and this sort of anticheat run at.

This is the level you would need to be to start doing really nasty things like keylogging, hiding processes/network/file activity, and generally making your computer gaslight you. This also means it can gaslight any antivirus you may be running.
@iska

27 Aug 2022 at 13:27 | Open on infosec.exchange
DELETED

@r000t @iska this just goes with the theme that you don't own your Windows system that Microsoft is going for. You're merely a guest on the OS you paid for.

27 Aug 2022 at 17:10 | Open on mastodon.social
Iska :emacs_thinking:​ :guix:

@AgreeableLandscape @r000t
ITS NOT A VULNERABILITY
You consented to install a rootkit.

27 Aug 2022 at 14:00 | Open on mstdn.starnix.network
Soy_Magnus
@iska @AgreeableLandscape @r000t bit the real question is what will it do and I'm going to use someone else's phone to find out
27 Aug 2022 at 11:29 | Open on shitposter.club
Go Up