News for hackers. Stuff that matters.
Re:Ridiculous vulnerability disclosure process with CrowdStr... by josephcsible on Monday August 22, 2022 @07:00PM (#32558398)
I hate that the component the vulnerability was in even exists. As far as I'm concerned, if a program tries to keep a local administrator from uninstalling it, for any reason, it's malware.
Re:Ridiculous vulnerability disclosure process with CrowdStr... by warhorse10_9 on Monday August 22, 2022 @07:12PM (#32558496)
Sorry, but I disagree. You have to look at the customer base crowdstrike is serving which can be wide and varied. There exist environments where the user "needs" admin privileges but should not be able to uninstall the sensor. Think corp where users code etc, but they dont have the admin staff to do some more complicated IT security. In that instance this is just what is needed. Also, privilege escalation exist and these sensor server to help prevent do IR for real malware.
Re:Ridiculous vulnerability disclosure process with CrowdStr... by joshspankit on Monday August 22, 2022 @07:36PM (#32558707)
Agreed. Windows just does not have the permission granularity necessary for non-standard usecases