Re:NSA-style backdoor in Huawei laptops found by Microsoft
by ryanlol on Tuesday April 09, 2019 @02:55PM
(#19617850)
Windows LPE bugs tend to be quite cheap and plentiful, I just can't see much value in inserting a bug like this to possibly make it slightly cheaper on a few specific machines.
Re:NSA-style backdoor in Huawei laptops found by Microsoft
by monocasa on Tuesday April 09, 2019 @06:11PM
(#19619495)
Windows LPEs are still up to $80k on zerodium, instead of the up to $50k for Linux, Mac, and BSD. Yes those numbers are funny money, and you're more likely to see a third of that, but they're still useful numbers in a relative sense.
Like I said, I think this is just a bug, but Windows LPEs do have value.
That being said, there is value in a LPE as a part of a bigger exploit chain. There's all sorts of exploits that'll give you relatively unprivileged code execution, and you'd want to silently elevate in order to make yourself persistent for instance.