News for hackers. Stuff that matters.

A comment on When Employees Use Software That IT Hasn’t Approved. Parent comment

Re:When Employees Use Software That IT Hasn’t Approved by alkonaut on Wednesday June 12, 2019 @04:24PM (#20168912)
Out of curiosity, what's the benefit of me doing bad things in a VM, instead of on my own machine - assuming the VM has full access to the same networks and data as the physical machine?

Unless the VM is somehow sandboxed it's just another box on the same network. So the same reasons for me not being admin on the physical machine (e.g. to not be able to download and run untrusted software because it might spread something on the network) should apply to the VM?

[ Parent | on HN ]
Re:When Employees Use Software That IT Hasn’t Approved by user5994461 on Wednesday June 12, 2019 @04:41PM (#20169077)
Of course the VM is isolated. That's exactly the point of a VM.

An account inside a VM will only let you play in that VM.

Whereas your account on the host is available and automatically granted access to all machines, fileshares and services on the active directory network. If it got admin rights, then you've got admin pretty much everywhere.

[ Parent | on HN ]
Re:When Employees Use Software That IT Hasn’t Approved by maxxxxx on Wednesday June 12, 2019 @04:57PM (#20169241)
“Whereas your account on the host is available and automatically granted access to all machines, fileshares and services on the active directory network. If it got admin rights, then you've got admin pretty much everywhere.”

Nonsense. You can have local admin rights that work only on one machine.

[ Parent | on HN ]
Re:When Employees Use Software That IT Hasn’t Approved by user5994461 on Wednesday June 12, 2019 @05:45PM (#20169662)
Nonsense, there are endless ways to escalate and pivot once you get local admin.

That being said, there are indeed restrictions that can and should be set on admin rights. Not that IT would know about it or that it would limit pivoting much.

[ Parent | on HN ]
Re:When Employees Use Software That IT Hasn’t Approved by ClassyJacket on Wednesday June 12, 2019 @10:09PM (#20171278)
"Nonsense, there are endless ways to escalate and pivot once you get local admin."

Why not report your findings to Microsoft and get your bug bounty payout?

And if this is true, wouldn't they also just do that from inside the VM?

[ Parent | on HN ]
Re:When Employees Use Software That IT Hasn’t Approved by alkonaut on Thursday June 13, 2019 @02:45AM (#20172361)
> Of course the VM is isolated.

Let's assume for the sake of discussion that to do what I need to do I not only need to install the program that requires priveleges, I also need a few of my company network drives mapped, access to some company systems, internet access and so on.

[ Parent | on HN ]