Post #198,834
3/15/05 4:54:15 PM
3/15/05 5:05:47 PM
|
It was quite helpful
And yes, I was _partly_ being intentionally obtuse. But, I still can't believe what you're saying. Are you saying that the DirectX APIs bypass all the security and let you have raw disk access?
Update: checked DirectX docs - no mention of direct access to disk. Is it an undocumented backdoor?
--
And what are we doing when the two most powerful nations on earth -- America and Israel -- stomp on the elementary rights of human beings?
-- letter to the editor from W. Ostermeier, Liechtenstein
Edited by Arkadiy
March 15, 2005, 05:05:47 PM EST
|
Post #198,880
3/15/05 9:34:49 PM
|
It isn't documneted the way you'd think.
Direct Media can use the alternative Streams of NTFS.
Umm, that would be direct DISK access.
-- [link|mailto:greg@gregfolkert.net|greg], [link|http://www.iwethey.org/ed_curry|REMEMBER ED CURRY!] @ iwethey[link|http://it.slashdot.org/comments.pl?sid=134485&cid=11233230|"Microsoft Security" is an even better oxymoron than "Military Intelligence"] No matter how much Microsoft supporters whine about how Linux and other operating systems have just as many bugs as their operating systems do, the bottom line is that the serious, gut-wrenching problems happen on Windows, not on Linux, not on Mac OS. -- [link|http://www.eweek.com/article2/0,1759,1622086,00.asp|source]
|
Post #198,957
3/16/05 9:52:25 AM
|
Well, the only things that grant access to file system
(that I found in the docs) are IFileSourceFilter, IFileSinkFilter and IFileSinkFIlter2.
All of them take a filename. I did not test it, but I doubt that the access control on the file name is bypassed by any of these interfaces.
--
And what are we doing when the two most powerful nations on earth -- America and Israel -- stomp on the elementary rights of human beings?
-- letter to the editor from W. Ostermeier, Liechtenstein
|
Post #198,994
3/16/05 11:31:08 AM
3/16/05 11:35:43 AM
|
Then how do you explain the fact that it happens?
Without escalation of Privs?
And, the fact of the matter... not that they by-pass them, are they even checked? By assumption or by method something has to be getting around it.
And the Local Policy over rides the others. So if the Citrix thinger you and andread are talking about, it doesn't amtter what DS groups memberships. It ain't supposed to be able to do that. But does.
-- [link|mailto:greg@gregfolkert.net|greg], [link|http://www.iwethey.org/ed_curry|REMEMBER ED CURRY!] @ iwethey[link|http://it.slashdot.org/comments.pl?sid=134485&cid=11233230|"Microsoft Security" is an even better oxymoron than "Military Intelligence"] No matter how much Microsoft supporters whine about how Linux and other operating systems have just as many bugs as their operating systems do, the bottom line is that the serious, gut-wrenching problems happen on Windows, not on Linux, not on Mac OS. -- [link|http://www.eweek.com/article2/0,1759,1622086,00.asp|source]
Edited by folkert
March 16, 2005, 11:35:43 AM EST
|
Post #198,995
3/16/05 11:36:22 AM
|
I have no explanation that I am sure of.
I think you don't either.
My guess is a security hole, a bug.
Your guess is an inherent deficiency of architecture.
Neither of us is in a position to prove our guesses. You are in a somewhat better position to investigate - you actually have logs and what not from your co-worker's breakage. But, unless you understand _exactly_ how the malware gained access to the protected areas of the system, we still don't know for sure.
--
And what are we doing when the two most powerful nations on earth -- America and Israel -- stomp on the elementary rights of human beings?
-- letter to the editor from W. Ostermeier, Liechtenstein
|
Post #199,001
3/16/05 11:43:24 AM
|
Thank you. (new thread)
Created as new thread #199000 titled [link|/forums/render/content/show?contentid=199000|Thank you.]
-- [link|mailto:greg@gregfolkert.net|greg], [link|http://www.iwethey.org/ed_curry|REMEMBER ED CURRY!] @ iwethey[link|http://it.slashdot.org/comments.pl?sid=134485&cid=11233230|"Microsoft Security" is an even better oxymoron than "Military Intelligence"] No matter how much Microsoft supporters whine about how Linux and other operating systems have just as many bugs as their operating systems do, the bottom line is that the serious, gut-wrenching problems happen on Windows, not on Linux, not on Mac OS. -- [link|http://www.eweek.com/article2/0,1759,1622086,00.asp|source]
|
