News for hackers. Stuff that matters.

A comment on Valve accused of ignoring existing RCE vulnerability in Source games for 2 years. Parent comment

Re:Valve accused of ignoring existing RCE vulnerability in S... by charcircuit on Saturday April 10, 2021 @05:11PM (#26765153)
Even if the security is bad does it even matter? User mode is enough for malware. "Sure an attacker could mine crypto, DoS people, use me as a proxy, keylog me, use my webcam, steal my saved usernames and passwords, but at least they can't upgrade my graphics drivers", said no one ever.
[ Parent | on HN ]
Re:Valve accused of ignoring existing RCE vulnerability in S... by oxylibrium on Saturday April 24, 2021 @02:12AM (#26922658)
Oh, there's a lot more "fun" stuff you can do in kernel mode. One comedic example is setting the CPU Vcore offset to +2.2V for fun/revenge. I don't know if it will destroy CPUs permanently, but it would be an interesting experiment.

More importantly though, once you're in the kernel, its much easier to hide your presence to all manner of Windows sysadmin tools.

[ Parent | on HN ]