Re:New Mac ransomware spreading through piracy
by aj3 on Wednesday July 01, 2020 @01:52PM
(#23704353)
Tamper protection is really meant for enterprise. Disabling it is exactly as hard as gaining privilege escalation. It is harder to achieve in AD (of course attackers gain lateral movement opportunities instead, but that's a different story), so Tamper protection makes sense there as an additional "security in depth" layer. At home where the logged in user is likely an admin already (even if "protected" by run as / UAC), tamper protection doesn't really add much apart from breaking existing exploit kits and requiring attackers to invest into new ones.
[ Parent
| on HN ]
There are no comments on this comment yet.