To view parent comment, click here.
To read all comments associated with this story, please click here.
Being able to install illegal software is a double edged sword I guess. It can help sell hardware, which increases the customer pool, but it also looses software sales, but without hardware in people's hands there is no software to be sold.
So you're right and it will be interesting to see when/how Microsoft will respond.
The "vulnerability" is really a non-issue, the way this procedure works starts by getting administrator privileges by attaching to a system level process using the debugger. This is perfectly allowed and lands you administrator privileges at once (which more or less means that everything is already broken into). The "vulnerability" is just a question of fooling CRSS, which is basically a user-land kernel component, into poking the kernel in the ways you wish.
It is certainly not a vulnerability in the sense of permitting malicious code to do bad things, since the malicious code being able to launch and connect the debugger to arbitrary processes means that it has already done everything it needs.





Member since:
2006-06-18
From the article:
Of course they will fix it if they determine that it is against their business interests. But I think they will observe what people do with the exploit to run their own Win32 apps. Because in the meantime, it can help badly needed sales of Surface RT.