News for hackers. Stuff that matters.

A comment on 35-year-old vulnerability discovered in scp. Parent comment

Re:35-year-old vulnerability discovered in scp by bryanrasmussen on Tuesday January 15, 2019 @04:00AM (#18909770)
reminds me of this raymond chen post https://blogs.msdn.microsoft.com/oldnewthing/20121207-00/?p=... with the quote "It's not really a vulnerability that you can do anything you want once you pwn the machine."
[ Parent | on HN ]
Re:35-year-old vulnerability discovered in scp by Dylan16807 on Tuesday January 15, 2019 @11:25PM (#18918221)
This is getting [partial] control of every machine that merely downloads a file from the one you took over.
[ Parent | on HN ]
Re:35-year-old vulnerability discovered in scp by bryanrasmussen on Tuesday January 15, 2019 @07:22AM (#18910641)
of course, if Windows used a capability based security model then it would still be a vulnerability that you could do anything you want once you pwn the machine.
[ Parent | on HN ]