Post #256,646
5/24/06 4:40:35 PM
|
Right - I haven't a clue where Word's "safe mode" switch is
I didn't know it had one.
[link|http://www.blackbagops.net|Black Bag Operations Log]
[link|http://www.objectiveclips.com|Artificial Intelligence]
[link|http://www.badpage.info/seaside/html|Scrutinizer]
|
Post #256,649
5/24/06 4:53:34 PM
|
Start button, Run, notepad
-----------------------------------------
Impeach Bush. Impeach Cheney. Do it now.
|
Post #256,654
5/24/06 5:05:49 PM
|
That was great
Create a desktop shortcut to Word that includes the ' /safe' switch. Cool, huh?
===
Purveyor of Doc Hope's [link|http://DocHope.com|fresh-baked dog biscuits and pet treats].
[link|http://DocHope.com|http://DocHope.com]
|
Post #256,663
5/24/06 5:34:46 PM
|
Create an alternate login without admin priviliges
Kinda like not logging on as root...
If you can't screw with the system, the vuln is unimportant.
|
Post #256,675
5/24/06 8:02:54 PM
|
You assume no bugs in Windows' authorization system
I think that that assumption is not safe.
Cheers,
Ben
I have come to believe that idealism without discipline is a quick road to disaster, while discipline without idealism is pointless. -- Aaron Ward (my brother)
|
Post #256,790
5/25/06 6:25:29 AM
|
I would never assume such a thing.
In fact, I would never assume that the Windows security model would work in any case. There are too many holes and exceptions there. Once you trick the machine into running code at system privilige level, you can then muck with ACLs and SACLs and there is no security system left, unless it is your intent to prevent the owner from using his machine at all, in which case the system can be fairly effective.
Vista currently runs processes at standard user level and requires consent to elevate them to run at admin level. This has already pissed enough people off that they now have a security setting option Local Security Setting : User Account Control : Behavior of the elevation prompt for administrators (Prompt for consent - No prompt - Prompt for credentials)
They're already patching the patches for a product not released yet. My faith in Microsoft is as strong as ever...
|
Post #256,901
5/25/06 6:54:09 PM
|
Then what's the point of creating a limited user account?
I have come to believe that idealism without discipline is a quick road to disaster, while discipline without idealism is pointless. -- Aaron Ward (my brother)
|
Post #256,923
5/26/06 7:34:57 AM
|
On released versions or Vista?
On released systems w2k and xp, for example, it might work. Might not. If you are willing to not be able to do installations that muck with the registry, you might dodge a bullet once in a while. You may have introduced another level of annoyance to your attacker.
On Vista, once again, M$ knows better than you what is good for you. If you are an administrator, you will run as a user unless you elevate the privilige level. They also have a shitload of new privilige levels. There is one called "Trusted Installer" that is a genuine significant rectal discomfort. You can be the sole adminstrator on the machine and you CAN'T change any settings or delete/modify files that have that privilige. In any event, they are now putting in ways around the new security features to try to make the system less obnoxious to upper end users.
|
Post #256,944
5/26/06 5:45:26 PM
|
Remind me not to use Vista...
I have come to believe that idealism without discipline is a quick road to disaster, while discipline without idealism is pointless. -- Aaron Ward (my brother)
|
Post #256,945
5/26/06 5:53:31 PM
|
Peter's job, stridently, I believe, but...
I'm willing to do so periodically as a friend.
Friends shouldn't let friends use Windows on the net...
|
Post #257,137
5/30/06 9:13:57 AM
|
Hey, Ben?
Don't use Vista.
===
Purveyor of Doc Hope's [link|http://DocHope.com|fresh-baked dog biscuits and pet treats].
[link|http://DocHope.com|http://DocHope.com]
|
Post #256,692
5/24/06 9:41:54 PM
|
Windows admin rights are a pain.
Especially when it takes admin priveledges to install most anything. A lot of corp environments give Windows users admin rights by default. Saves on tech support calls.
Snort.
-----------------------------------------
Impeach Bush. Impeach Cheney. Do it now.
|
Post #256,785
5/25/06 2:48:53 AM
|
THE LACK OF Windows admin rights IS a pain.
[link|http://www.blackbagops.net|Black Bag Operations Log]
[link|http://www.objectiveclips.com|Artificial Intelligence]
[link|http://www.badpage.info/seaside/html|Scrutinizer]
|
Post #256,828
5/25/06 10:25:55 AM
|
Two levels of security - All or Nothing.
|
