Vista Hacking Challenge Answered

debiansid writes "Microsoft's most secure Operating System yet has been compromised at the Black Hat hacker conference. We all know that Andrew Cushman, Microsoft's director of security outreach invited the Black Hats over to touch and feel Vista in order to showcase the superiority of this OS. Joanna Rutkowska, from Coseinc, a Singapore-based security firm, obliged and showed how it is possible to bypass security measures in Vista that prevents unsigned code from running with the help of a little software she calls the 'Blue Pill.'" To be fair, the hack was possible only when the target is in administrator mode rather than a limited user account.

Re:Only works as an administrator but...

[twofidyKidd]

I posted a similar comment mere seconds after yours. Bet I win with the most "redundant" down mods.

Re:Would they tell anyway?

[pedantic bore]

I'd try to trick them in to rewriting some crucial piece of the security infrastructure at the last possible minute. That way, I'd never run out of new holes to fine.

Perhaps I'd do this by smiling and saying that the OS was so secure that I couldn't find anything wrong with it and recommending, no, begging that they ship it in exactly its current form.

Shut the fuck up, Donny

[heinousjay]

Vista's security scheme works like sudo or the OS X admin password dialog. You're out of your element.

Blue Pill

[frosty_tsm]

Nooo, take the Red Pill!

Re:Hmmm...

[Anonymous Coward]

Was there some kind of point you were trying to make? That software developers 'steal' ideas from one another? What exactly do you expect?

Developer 1: Hey we really should get around to fixing this problem where all our users are running as root.
Developer 2: Can't. OS X already did it.
Developer 1: Damn.

Yeah, right.

Re:The blue pill?

[Vacuous]

Woah.

Re:Only works as an administrator but...

[jZnat]

Or stick them in the console like single user mode does.

Where can I get "blue pill"????

[Sathias]

Oh man, a program that will let me run code in administrator mode... that would be sooooo sweet *cough*

Re:To be fair to MS

[Anonymous Coward]

except ME, that sucked dick.

once again, we're reminded of the importance of proper comma placement.

Sounds like...

[Chris.Boyle]

...a ring-3 circus to me.

I'll get my coat.

Oh come on

[Colin Smith]

Read all about it! Anonymous Coward [wikipedia.org] is going to switch operating systems.
 

Re:MS Support calls

[greenrd]

You don't really think that MS would make that button scriptable, do you? I don't think even MS are that stupid.