Ask HN: What stops a random USB device from rooting Windows?

Re:Ask HN: What stops a random USB device from rooting Windows? by hnuser123456 on Monday April 18, 2022 @04:55PM (#31076417)

If the current user isn't an admin, they can't just click through UAC.

If they are an admin, they could just do this manually.

Either way, no privilege escalation, which "rooting" typically implies.

Sure, you could make a USB stick that automates any user input, but you could just make the same inputs yourself with the keyboard and mouse already at the machine. What kind of situation does this actually benefit you in?

[ Parent | on HN ]

Re:Ask HN: What stops a random USB device from rooting Windows? by JackGreyhat on Monday April 18, 2022 @04:59PM (#31076475)

Well, the speed. You plug the usb in, unplug it 5 seconds later, and you walk away from a backdoored system talking to your C2 server.

[ Parent | on HN ]