Vista hacked at Black Hat Convention
Sunday, August 6, 2006 by Island Dog | Discussion: WinCustomize News
Microsoft recently invited hackers and "security professionals" at the Black Hat convention in Las Vegas to "test" Vistas security measures. Even giving out beta releases of Vista to attendees.
It didn't take long for one researcher to bypass Vistas security.
" Joanna Rutkowska, a Polish researcher at Singapore-based Coseinc, showed that it is possible to bypass security measures in Vista that should prevent unsigned code from running.
And in a second part of her talk, Rutkowska explained how it is possible to use virtualization technology to make malicious code undetectable, in the same way a rootkit does. She code-named this malicious software Blue Pill. "
Microsoft says they are working on a system to prevent these types of attacks in the final version of Vista. While Vista still is a way off, I really hope Microsoft will get it together.
Link
It didn't take long for one researcher to bypass Vistas security.
" Joanna Rutkowska, a Polish researcher at Singapore-based Coseinc, showed that it is possible to bypass security measures in Vista that should prevent unsigned code from running.
And in a second part of her talk, Rutkowska explained how it is possible to use virtualization technology to make malicious code undetectable, in the same way a rootkit does. She code-named this malicious software Blue Pill. "
Microsoft says they are working on a system to prevent these types of attacks in the final version of Vista. While Vista still is a way off, I really hope Microsoft will get it together.
Link
Keikonium
Reply #2 Monday, August 7, 2006 5:29 AM
Reply #2 Monday, August 7, 2006 5:29 AM
Reading sections of the article, it seems she simple agreed to let her code pass through with a click of a button 
? Unless I am missing something here 
. Not exactly hacking if you simply allow it via a button...
Cool none the less. A female 'hacker' is just plain cool
. I hope Vista gets secure enough to not allow harmful code and scripts, but not to secure as to hinder the "experience" with Vista (damn you DRM...)
? Unless I am missing something here 
. Not exactly hacking if you simply allow it via a button...Cool none the less. A female 'hacker' is just plain cool
. I hope Vista gets secure enough to not allow harmful code and scripts, but not to secure as to hinder the "experience" with Vista (damn you DRM...)
skinz2nice
Reply #3 Monday, August 7, 2006 12:07 PM
Reply #3 Monday, August 7, 2006 12:07 PM
Wow, A Female Hacker. Hope Vistas security will be alot better than these previous versions they've released. We'll have to see.
Sraf
Reply #4 Tuesday, August 8, 2006 10:28 AM
Reply #4 Tuesday, August 8, 2006 10:28 AM
I like the left out bit on how this only works in Admin accounts. Isn't Vista supposed to default to Standard user? (Making this a bit of a non issue)
phoenixma
Reply #5 Tuesday, August 8, 2006 11:16 AM
Reply #5 Tuesday, August 8, 2006 11:16 AM
Well Symantec did say that so far Vista's security is worse than XP's.
Tarkus
Reply #6 Tuesday, August 8, 2006 12:31 PM
Reply #6 Tuesday, August 8, 2006 12:31 PM
You would expect them to say their products are no longer necessary?
Xenon101
Reply #7 Wednesday, August 9, 2006 1:27 AM
Reply #7 Wednesday, August 9, 2006 1:27 AM
Why is it that Microsoft leave everything to the last minute?! Com'on Microsoft!
Please login to comment and/or vote for this skin.
Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:
- Richer content, access to many features that are disabled for guests like commenting on the forums and downloading skins.
- Access to a great community, with a massive database of many, many areas of interest.
- Access to contests & subscription offers like exclusive emails.
- It's simple, and FREE!
Reply #1 Monday, August 7, 2006 1:35 AM