Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Web-App-Sec
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

RE: Re[2]: [Full-disclosure] Next generation malware: Windows Vista's ga

from [Peter Gutmann] Network Security [Permanent Link]
Subject: RE: Re[2]: [Full-disclosure] Next generation malware: Windows Vista's gadget API
Date: Wed, 19 Sep 2007 01:29:55 +1200 
"Roger A. Grimes" <roger@banneretcs.com> writes:


I'm sorry, we'll have to agree to disagree. I don't see the new attack vector
here. I, the attacker, have to make you download my malicious trojan program,
which you install on your computer.


It's not so much the attack vector, it's the usability issue.  This makes it
just too easy to convince users to download and execute untrusted content.


But if you're worried that your users will click past 3 to 5 warning messages
to install untrusted gadgets (which they will), then completely control them
using group policy.


On Joe Sixpack's PC in his den?

(As you say, I think we'll have to agree to disagree on this one.  Let's wait
until the phishers discover it and then revisit the topic :-).

Peter
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  Re: Re[2]: [Full-disclosure] Next generation malware: Windows Vista's gadget API, Peter Gutmann
Next by Date:  RE: Re[2]: [Full-disclosure] Next generation malware: Windows Vista's gadget API, Ed Patterson
Previous by Thread:  Re: [Full-disclosure] Next generation malware: Windows Vista's gadget API, Tim Brown
Next by Thread:  RE: Re[2]: [Full-disclosure] Next generation malware: Windows Vista's gadget API, Ed Patterson
Indexes:  [Date] [Thread] [Top] [All Lists]