Re: Is Windows Integrity Control in Vista really worth the performance hit? And does it really work?

[Joanna Rutkowska <joanna () invisiblethings org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Security Admin (NetSec) wrote:
> I have been playing around with Vista for about a year; to date I
> cannot find a reason why one would take the productivity hit to
> upgrade.  For those who do not know what WIC is, there is a good into
> write-up at http://www.securityfocus.com/infocus/1887. While Windows
> Integrity Control (WIC) is somewhat secure, I was able to elevate
> privileges on programs using a tool from a friend of mine.

Lucky you! (to have such helpful friends ;)

> Presumable one could use this tool or one like to elevate their
> privileges as well.  Has anyone tried to elevate all the way to
> SYSTEM?  I know it is possible to elevate form Low to Medium to High.

I'm sure everybody on this list would love to hear the details :)

> It seems to me that the Linux and BSD folks have figured out how to
> implement access controls without a heavy load on the system; Vista
> really chokes.

"Heavy load on the system"? That's interesting...

How about we don't mix our subjective opinions about performance, UI
functionality, etc, with technical discussions about security mechanisms?

joanna.
-----BEGIN PGP SIGNATURE-----

iD8DBQFF5tijORdkotfEW84RAh3JAKDEpuMgBxh5vqAEj+EgImVppxBsMACfXn96
GOv0S1r3CDC3ML9EoUBmMmM=
=tbXW
-----END PGP SIGNATURE-----
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave