full-disclosure - local SYSTEM on Windows vs. local root onUnix

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: mvp at joeware.net (joe)
Subject: local SYSTEM on Windows vs. local root onUnix

I understand what you are saying but don't completely agree with intent.
More Unix admins know how to run things as root than Windows admins know how
to run things in localsystem. Getting localsystem isn't a straight logon
with a specific password thing, you have to know how to either spin up a
specific service to do what you want or force an existing service to do what
you want. 

If the Windows machine is properly locked down and patched it should be near
impossible for someone to gain localsystem access unless they are already an
admin, and a fairly knowledgeable one at that. 

   joe

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of K_aneda
Sent: Tuesday, January 20, 2004 8:26 PM
To: KF
Cc: full-disclosure@...ts.netsys.com
Subject: Re: [Full-Disclosure] local SYSTEM on Windows vs. local root onUnix

Though it could be said that's it harder to get root on most *nix machines
than it is to get LocalSystem on a Windows machine..