News for hackers. Stuff that matters.

A comment on HiveNightmare a.k.a. SeriousSAM – anybody can read the registry in Windows 10. Parent comment

Re:HiveNightmare a.k.a. SeriousSAM – anybody can read the re... by aj3 on Saturday July 24, 2021 @09:57AM (#27940985)
Password hashes. /etc/shadow isn’t world readable in Linux dither
[ Parent | on HN ]
Re:HiveNightmare a.k.a. SeriousSAM – anybody can read the re... by ylyn on Saturday July 24, 2021 @01:59PM (#27943063)
It seems like there are some cases where Windows accepts a password hash for authentication as a user though. So by having the hash of an administrator, you can escalate privileges.

I don't think there are such cases in Linux.

[ Parent | on HN ]