Slashdot Mirror
Code Published for Triggering a BSOD on Windows Computers -- Even If They're Locked (bleepingcomputer.com)
"A Romanian hardware expert has published proof-of-concept code on GitHub that will crash most Windows computers within seconds, even if the computer is in a locked state," writes BleepingComputer. An anonymous reader quotes their report:
The code exploits a vulnerability in Microsoft's handling of NTFS filesystem images and was discovered by Marius Tivadar, a security researcher with Bitdefender. The expert's proof-of-concept code contains a malformed NTFS image that users can take and place on a USB thumb drive. Inserting this USB thumb drive in a Windows computer crashes the system within seconds, resulting in a Blue Screen of Death (BSOD). "Auto-play is activated by default," Tivadar wrote in a PDF document detailing the bug and its impact...
Tivadar contacted Microsoft about the issue in July 2017, but published the PoC code today after the OS maker declined to classify the issue as a security bug. Microsoft downgraded the bug's severity because exploiting it requires either physical access or social engineering (tricking the user).
Tivadar contacted Microsoft about the issue in July 2017, but published the PoC code today after the OS maker declined to classify the issue as a security bug. Microsoft downgraded the bug's severity because exploiting it requires either physical access or social engineering (tricking the user).
I'm not impressed. It requires you to tell your computer to run every program anyone sticks into it.
Wake me up when someone publishes something that's guaranteed not to crash Windows...
Mine is guaranteed to bring down any system regardless of OS: Strap C4 to it and detonate.
USB is problematic anyway. Where I worked if you inserted a flash drive into a computer it would lock you out and send an alert to security. Good way to get fired.
I've found another similar exploit.
If you pull on the flexible plastic tube that link the computer to the wall, the computer will abruptly shutdown without warning. Sometimes, you may even *corrupt* the file system, if you time it right! And Microsoft refuses to acknowledge this as a severe vulnerability! Crazy!
That's strange. My computer always asks me what I want to do when I put a USB drive in, and I never changed the default.
and makes an .iso or .img or some other sort of file that can be downloaded disguised as something else, and when the user clicks on it and it BSODS their windows
Like to the actual proof of concept, instead of to the top website in your internet explorer favourites.
Doesn't work, at least on a (since Jan 2018) unpatched Win7 Home Premium system. "The file or directory is corrupt and unreadable" when trying to access the drive even. Maybe I have to patch it?
It is pitch black. You are likely to be eaten by a grue.
even if the computer is in a locked state
I feel this bug won't be fixed by M$ because this is a very important feature for authorities. This is an intentional feature so TLA can just stick-in their USB toolkit and unlock any machines at will at checkpoints and airports.
Sorry, this is a secret feature and NOT A BUG.
Don't they know that it doesn't take any exploit to BSOD a Windows machine. They come that way straight from the shop.
Well it is a way quick to turn off a Windows PC
Well makes for a great system lock
Well at least the screen looks scary, with that on the PC at Starbucks, no one will steal the laptop
I will be here all week, tip the waitresses
Date: September 28, 1999.
Weldon statement.
The full article.
It's not auto-play, it's auto-mount. Something that Mac and your beloved Linux Machines will do, too.
See subject & on the subject of FILESYSTEMS in general: I'd create a slow insidious method that would be hard to id:
Zerobyte length file creation @ high speed!
This INEVITABLY floods masterfiletables out eating up ALL diskspace on ANY filesystem!
* You're possibly thinking "How could a file w/ no length do that?" - it wouldn't. Entries in masterfiletables, afaik, are NEVER PURGED & grow unstoppably the more entries they gain, never undoing deleted files (which is also why NTFS/HPFS you-name-it-FS, afaik, can also show 'guiltyness' during forensic analysis, despite deletion of files (yes, even by tools like 'bleachbit' etc.)).
* Feel free to correct me IF I am off/wrong guys - it's been a LONG while since I looked @ things @ that level (filesystems).
APK
P.S.=> No, I instead chose to create tools that help folks https://it.slashdot.org/comments.pl?sid=12027433&cid=56500021/ vs. threats... apk
What is the point ? If I have physical access to the machine I can induce the equivalent of a BSOD by unplugging the fsck'n thing. Why bother with a USB stick to make it crash ? Seems like an exercise in stupidity. I've discovered that I can crash your computer even if locked if I can get physical access to it by picking it up off the shelf and throwing it to the floor. Rinse, repeat....
errr....umm...*whooosh* *whoosh* Is this thing on ?
So physical access and social engineering aren't problems now?
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
First, I don't know what "total investigated" crimes mean, but according to the 2015 FBI crime stat, "Black or African American" represented 26.5% of total arrests. This includes women as well. Granted, that may be twice their representation in the population but it's nowhere near "a vast majority" of crimes. However, at least some of this disparity can be explained away comparing crime rates within socio-economic classes: If a socio-economic class that is heavily African-American also has a high crime rate and within that socio-economic class African-Americans commit crimes at the same rate as non-African-Americans, then your logic falls apart completely.
Looking just at the individual crimes you listed:
robberies - 53.5%, a slim majority
rapes - 28.2%
assaults - data not in chart, but "other assaults" are 30.8%
aggravated assaults - 32.1%
murders - 51% - a slim majority
drug crimes - not listed in chart, as just about any crime might be drug-related. Drug abuse violations - 27.0%, Driving under the influence (including alcohol) - 13.2% (right in line with the population)
Totalling just the measurable numbers above and leaving out drug crimes:
robberies - 39,052 of 73,023
rapes - 4,907 of 17,370
assaults - data not in chart, but "other assaults" are 254,600 of 826,920
aggravated assaults - 92,237 of 287,566
murders - includes non-negligent manslaughter 4,347 of 8,508
Total of these groups: 395143 of 1213387, or 32.5%, only slightly higher than the "other assaults" percentage, which is to be expected as that dominates this group.
Yes, 32.5% is much greater than the their overall arrest rate, and it's over 2 1/2 times their percentage of the population, which was at least 17.6% in 2015 (some Hispanics and pepole of two or more races may be African-American as well). However, much of the difference in crime rate in the United States is better attributed to socio-economic factors than anything else. To the extent that anything can be attributed to race, I strongly suspect that much of it is the legacy of "Jim Crow" and the racism of the past. I also suspect that some of it is a result of present-day racism, which, while not as prevalant as 50 years ago, still exists and still generates "defensive responses" - which in some cases may be criminal - in its victims.
The bottom line:
While your statement "those who care for their safety and the safety of their families have two choices" might actually be true if we lived in a community which matched your mistaken statistics, we don't live in such a country.
If you are going to appeal to racism on a technical forum, at least give your readers the courtesy of using statistics that are at least close to accurate. At least you did get the "7% of the population are Black males" right if you don't count Hispanics and those of more than one race, and assuming you meant the United States and not the entire world. Thank you for that much.
Oh, by the way, White people make up 82.6% of people arrested for driving under the influence, but they are 61% of the population (possibly up to 78% if all Hispanics and mult-racial people were also White).
2015 crime figures are from
https://ucr.fbi.gov/crime-in-t...
2015 population figures are from https://www.statista.com/stati...
I was unable to find a race/ethnic breakdown of licensed drivers or driving patterns of miles driven. It is possible that the high rate of White DUI arrests correspond to Whites having a higher-than-expected number of license drivers or miles driven that their percent of the population would suggest.
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
Another funny thing: as Jim Crow laws were repealed, as affirmative action was enabled, as "racism" became synonymous with "pure evil", well during this time, black crime has steadily INCREASED. Really puts the lie to the whole "because we have been oppressed" idea.
Things are a lot more complicated than that. If your grandparents were oppressed, your parents probably didn't have the opportunities their non-oppressed peers had. If they didn't have those opportunities, then your socio-economic status is probably lower. To the extent that certain crimes are correlated with low socio-economic status, people whose grandparents were oppressed will be over-represented in statistics for those crimes.
There is also biology at work: If your grandparents were of a low socio-economic class, whether due to racial oppression or other reasons, your parents are more likely to have low nutrition and epigenic factors that impair their ability to succeed in life compared to their peers. This means they are more likely to be in a lower socio-economic class. If they are in a lower socio-economic class, odds are you will be too. These biological factors are independent of race - they are a fuction of the value your parents and their parents placed on good nutrition and good health, the ability of them to afford nutritious food and live a healthy lifestyle, and exposure to physical stress such as pollution and psychological stress such as worrying about bills. These aren't the only factors of course. If your parents or their parents placed a high value on education and instilled those values on your parents or you, the odds of you becoming successful are higher than if they were not. This is one reason Asian immigrants tend to do better than immigrants from other countries or poor families from other ethnicites: The parents of the immigrants valued education and passed those values on to the immigrants, who passed them on to their children.
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
It focuses on profiling and why it happens.
I don't know about you, but I profile becase I'm lazy or pressed for time. It's unfair to those I profile for obvious reasons, but it is expedient. It's unfair to me because the false-positive and false-negative results of assuming "it fits the profile" is a proxy for whatever it is I'm really trying to measure are both non-zero.
When I have the luxury of time, I have a duty to myself and other to skip the profiling.
When time is of the essence, such as when a sportscar is approaching me very fast and weaving in and out of traffic, and I profile the driver as an idiot who doesn't know how to drive safely or doesn't care because I don't have time to find out if he actually does have the skills to weave in and out of traffic at high speeds, assume the worst and get the [bleep] out of his way. Why? I'm probably right, and if I am wrong, I'm not hurting him and it's worth the inconvenience on my part.
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
See subject UNIDENTIFIABLE anonymous worm. Says it all about your "FoAmInG-@-TeH-MouTh" so-called response.
* I've thought about WHY you & "your kind" offer zero - you are ZERO, a do-nothing "ne'er-do-well", nothing more.
(You obviously WASTED your waste of a life, "trolling" vs. educating yourself... no questions asked).
APK
P.S.=> As to my work? Well, others disagree w/ you (love doing this part) shutting your dumb mouth by making you EAT YOUR WORDS yet again as always vs. me & these facts https://tech.slashdot.org/comments.pl?sid=12042539&cid=56520379/ lol - I love it! apk