“fractureiser” malware in many popular Minecraft mods and modpacks

Re:“fractureiser” malware in many popular Minecraft mods and... by kaba0 on Thursday June 08, 2023 @10:42AM (#36242656)

You are running code on your CPU in ring 0 all the time? No. The same way a sandbox gives a whitelist approach to security — this app by default should have no filesystem access. It does want to open a file — ask the user whether it should be able to or not.

Security is upheld, user control is given, everyone is happy.

[ Parent | on HN ]

Re:“fractureiser” malware in many popular Minecraft mods and... by throwaway290 on Thursday June 08, 2023 @11:51AM (#36243958)

Well if we are talking sandboxing, Windows has it and this malware specifically has sandbox escape functionality for that purpose.

[ Parent | on HN ]

Re:“fractureiser” malware in many popular Minecraft mods and... by kaba0 on Thursday June 08, 2023 @05:39PM (#36249547)

What kind of sandbox does Windows have? All I could find was about a pro/enterprise feature but even that has to be explicitly started and I doubt minecraft users used that.

Not having admin rights is almost uselessly crude as a “sandbox”.

[ Parent | on HN ]

Re:“fractureiser” malware in many popular Minecraft mods and... by andersa on Thursday June 08, 2023 @06:38PM (#36250212)

There is the one called "windows sandbox" but it's not persistent making it useless.

More recently, I've been following https://github.com/microsoft/win32-app-isolation which seems incredibly interesting! If they can pull it off, we will have mobile-os like security on windows, finally, after all these years.

It has been my #1 feature request for windows for so long... I almost can't believe it's actually happening.

[ Parent | on HN ]

Re:“fractureiser” malware in many popular Minecraft mods and... by throwaway290 on Friday June 09, 2023 @01:42AM (#36253744)

Idk https://news.ycombinator.com/item?id=36238459

[ Parent | on HN ]