labelbabyjunior

Try leaving your bubble sometime and stepping onto a construction site, you would be in awe.

Apparently you've never had drywall work done, the level of risk these guys take in stride is shocking.

Well the OS should do nothing—remember MS was taken to court over that—but better privsep on the part of the AV, sure.

Technically, Defender can be replaced with 3rd party AV.

They kind of have to, though.

If malware exploits a privilege escalation vuln, what's the AV going to do about it when it's reduced to the software equivalent of a UK police officer? Observe and report? Stop or I'll say "stop" again?

AV requires great power, which requires great responsibility. The second part is what often eludes AV developers.

Some files under Windows are protected as the TrustedInstaller user, which is a more restrictive level of permissions than SYSTEM.

A local privilege escalation to root via an exploitable service?

Doesn't Linux have one of these CVEs...each week?

> So its just embeding some files in a satalite tv broadcast stream?

Which is neither new nor novel.

PlayCable was doing this to download console games over analog cable systems <checks notes> 46 years ago.

TeleText says hello.