The BackDoor Factory: Patch win86/64 PE and linux86/64 binaries with shellcode

Re:The BackDoor Factory: Patch win86/64 PE and linux86/64 bi... by onli on Friday July 18, 2014 @08:05AM (#8052547)

> Microsoft did a good job conditioning people into not running stuff that is not signed

Maybe this changed with Windows 8, but till Windows 7, Microsoft did a good job conditioning people to completely ignore the signature.

Or at least the status of the signature, whether it is trusted or not. Is there a further escalation if there is no signature at all I'm not aware of?

If not, there was a great article describing how much work was needed to get the small green checkmark by getting a signature as trusted, and how this did not have any benefit at all (because of styling and design of the dialogue, and UAC asking anyway for confirmation). Of course I don't find that now, but I'm pretty sure it was on HN some time ago, maybe you saw it (probably before Windows 8).

[ Parent | on HN ]

Re:The BackDoor Factory: Patch win86/64 PE and linux86/64 bi... by pilif on Friday July 18, 2014 @08:33AM (#8052641)

Windows 8 is much more persistent in warning you when running unsigned binaries. And IE under Windows 8 flat-out refuses to let you run unsigned binaries.

Getting binaries signed isn't that hard either.

[ Parent | on HN ]