[Full-disclosure] Removing the NIC cable = EoP?

Pink Hat pinkhat.h4x0r at gmail.com
Tue Oct 3 17:45:14 BST 2006


Wrong.

It is about getting local admin rights in this case as the so called attack
scenario requires it.

List -- this is so easy to disprove yet we have all kinds of so called
security professonals and in this case a (wow, I am almost pissing myself)
BSD Kernel hacker, stating that they feel its a possible attack.

Go grab VMWare and various windows versions from your favorite warez site
and spend the time to actually try things and understand how the technology
works before you comment.

The bottom line is that what was posted on that site about "hacking high
school computers" is false.


On 10/3/06, Tonnerre Lombard <tonnerre.lombard at sygroup.ch> wrote:
>
> Salut,
>
> On Tue, 2006-10-03 at 14:33 +0530, crazy frog crazy frog wrote:
> > I doubt it will work on any windows OS. If a user is logged in as a
> > user who dont have admin rights then unplugging network cable does not
> > give him admin.
>
> AFAICT this is not about gaining admin rights (which one would if the
> machine is a non-NT based Windows) but rather about gaining the right to
> surf whatever website one wants. This can indeed be achieved by not
> loading the group policies. (If I'm not mistaken here. I'm a BSD kernel
> hacker, not a Windows supporter...)
>
>                                Tonnerre
> --
> SyGroup GmbH
> Tonnerre Lombard
>
> Loesungen mit System
> Tel:+41 61 333 80 33    Roeschenzerstrasse 9
> Fax:+41 61 383 14 67    4153 Reinach BL
> Web:www.sygroup.ch      tonnerre.lombard at sygroup.ch
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20061003/0c6a23c5/attachment.html 


Full-Disclosure is hosted and sponsored by Secunia.