Comment by darby_nine

Comment by darby_nine 10 months ago

3 replies

> This is a virtue. We can do whatever we want with the computer we own and use.

You certainly don't need to do it with a single line of powershell though. At least, not without intentionally opting into it. For the most part on a daily basis I just want to use my computer, not modify it.

Anyway, at the very least most functionality should be sandboxed so that if someone does something without your consent, it can't do much damage. Though this wasn't the original intention, leveraging user privileges and sandboxing applications by user is an effective way to do this.

Besides what kind of moron would choose proprietary software if they wanted control of their machine? It's inherently a contradictory impulse.

lyu07282 10 months ago

> At least, not without intentionally opting into it.

just to clarify in Windows, users with administrative privileges will in theory still ask the user to opt-in every time before any process is elevated to administrative rights. Its just that Windows security is so awful that people have found many different creative ways around it over the years, but those are (sometimes) getting patched by Microsoft so they are considered "bugs".

For example a process stores its executable path in memory writable by itself, so you could start a process that replaces its executable string to "C:\Windows\explorer.exe" and it would (for whatever reason) bypass the "ask for administrative rights" dialog popup. This is the sort of "security" that Windows is built around to its very core.

https://github.com/hfiref0x/UACME

> "This tool shows ONLY popular UAC bypass method used by malware, and re-implement some of them in a different way improving original concepts. *There are different, not yet known to the general public, methods. Be aware of this;*"

(also i think you are responding to a troll btw)

  • Dalewyn 10 months ago

    >(also i think you are responding to a troll btw)

    You would be wrong.

    • lyu07282 10 months ago

      thats exactly what a troll would say though :p