sexta-feira, 8 de agosto de 2008

Fw: Vista's Security Rendered Completely Useless

URL:
http://rss.slashdot.org/~r/Slashdot/slashdot/~3/359389470/article.pl
scribbles89 sends in a story that originally ran in SearchSecurity; it
sounds like it could be a game-changer. "While this may seem like any
standard security hole, other researchers say that the work is a major
breakthrough and there is very little that Microsoft can do to fix the
problems. These attacks work differently than other security exploits,
as they aren't based on any new Windows vulnerabilities, but instead
take advantage of the way Microsoft chose to guard Vista's fundamental
architecture. According to Dino Dai Zovi..., 'the genius of this is
that it's completely reusable. They have attacks that let them load
chosen content to a chosen location with chosen permissions. That's
completely game over.'" Update: 08/08 14:23 GMT by KD : Changed the
link, as the story first linked had been lifted without attribution.

Read more of this story at Slashdot.

--

Nenhum comentário: