A Ovest Di Paperino

Welcome to the dark side.

Gli infaticabili

Certo è che gli editor di Slashdot sono davvero infaticabili:

This video shows a method by which a user can use a Linux distro called BackTrack to gain system access to Windows Vista without logging into Windows or knowing the username or password for any accounts. To accomplish this, the user renames cmd.exe to Utilman.exe — this is the program that brings up the Accessibility options for users without sight or with limited vision. The attack takes advantage of the fact that the Utility Manager can be invoked before the user logs into the system. The user gains System access, which is a level higher than Administrator. The person who discovered this security hole claims that XP, 2000, 2003 and NT are not vulnerable to it; only Windows Vista is.

Sarà almeno la quindicesima volta che viene pubblicato un articolo su come guadagnare "System level access" partendo da... l'accesso fisico al sistema. Che siano arrivati ad essere a corto di idee? Rimango incredulo per tanta persistente ignoranza.


Technorati tags: ,