Dailydave mailing list archives
Re: Is Windows Integrity Control in Vista really worth the performance hit? And does it really work?
From: Joanna Rutkowska <joanna () invisiblethings org>
Date: Thu, 01 Mar 2007 08:44:05 -0500
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Admin (NetSec) wrote:
I have been playing around with Vista for about a year; to date I cannot find a reason why one would take the productivity hit to upgrade. For those who do not know what WIC is, there is a good into write-up at http://www.securityfocus.com/infocus/1887. While Windows Integrity Control (WIC) is somewhat secure, I was able to elevate privileges on programs using a tool from a friend of mine.
Lucky you! (to have such helpful friends ;)
Presumable one could use this tool or one like to elevate their privileges as well. Has anyone tried to elevate all the way to SYSTEM? I know it is possible to elevate form Low to Medium to High.
I'm sure everybody on this list would love to hear the details :)
It seems to me that the Linux and BSD folks have figured out how to implement access controls without a heavy load on the system; Vista really chokes.
"Heavy load on the system"? That's interesting... How about we don't mix our subjective opinions about performance, UI functionality, etc, with technical discussions about security mechanisms? joanna. -----BEGIN PGP SIGNATURE----- iD8DBQFF5tijORdkotfEW84RAh3JAKDEpuMgBxh5vqAEj+EgImVppxBsMACfXn96 GOv0S1r3CDC3ML9EoUBmMmM= =tbXW -----END PGP SIGNATURE----- _______________________________________________ Dailydave mailing list Dailydave () lists immunitysec com http://lists.immunitysec.com/mailman/listinfo/dailydave
Current thread:
- Is Windows Integrity Control in Vista really worth the performance hit? And does it really work? Security Admin (NetSec) (Mar 01)
- Re: Is Windows Integrity Control in Vista really worth the performance hit? And does it really work? Joanna Rutkowska (Mar 01)