News for hackers. Stuff that matters.

A comment on Savitech USB audio drivers install a new root CA certificate. Parent comment

Re:Savitech USB audio drivers install a new root CA certificate by iancarroll on Thursday November 02, 2017 @09:05PM (#15615914)
A better rebuttal is that UAC is not a security boundary and bypassing it is trivial.
[ Parent | on HN ]
Re:Savitech USB audio drivers install a new root CA certificate by dingo_bat on Friday November 03, 2017 @06:03AM (#15617929)
Has that been done? I have been thinking it's pretty secure!
[ Parent | on HN ]
Re:Savitech USB audio drivers install a new root CA certificate by iancarroll on Friday November 03, 2017 @08:44AM (#15618700)
Yes. UAC was not really designed as a security boundary in the first place.

Here are some public exploits for it: https://github.com/hfiref0x/UACME

[ Parent | on HN ]
Re:Savitech USB audio drivers install a new root CA certificate by Dylan16807 on Friday November 03, 2017 @11:29AM (#15619896)
It's pretty bad. Even if you put it on max, disabling automatic elevation, there are still flaws that microsoft doens't bother to fix.
[ Parent | on HN ]