Slashdot Mirror

← Back to Stories (view on slashdot.org)

Windows Vulnerable To 'Token Kidnapping' Attacks

Posted by timothy on from the token-of-my-affection dept.

cuppa+tea writes "More than a year after Microsoft issued a patch to cover privilege escalation issues that could lead to complete system takeover, a security researcher plans to use the Black Hat conference spotlight to expose new design mistakes and security issues that can be exploited to elevate privileges on all Windows versions, including the brand new Windows 2008 R2 and Windows 7."

1 of 126 comments (clear)

  1. Re:Apple replies by Anonymous Coward · · Score: -1, Flamebait

    I actually remember quite a few times in the past when Linux had root elevation exploits.

    [Citation needed]

    The Linux community just replied with "don't let people you don't trust have console access".

    [Citation needed]

    I still love how *nix naturally allows individual services to run under different users while Windows defaults to more of a blanket user to access everything.

    [Clue (desperately) needed]