Earlier quoted context omitted.
What? Maybe the Epoch Times is biased, but the Falun Gong is nothing like scientology: it has no fees and isn't trying to coerce anyone to join. It's a minority group that is persecuted by the CCP.
What kind of minority group? They're religious kooks. That doesn't mean they deserve to be stamped out, necessarily, but they're also not a "minority group" by the common definition of the term.
Microsoft finds privilege escalation vulnerability in Huawei driver
71–80 of 138 posts
Re: Microsoft finds privilege escalation vulnerability in Huawei driver
#72From scanning the page it sounds like Huawei used a hack to make their MateBookService unkillable, unremovable, by unhooking in to services.exe. That in the process of that they left the possibility that the device they were using HwOs.*\.sys was only protected from being used by checking the program had the right path, thus leaving it open to crackers (it being basically g+rw) to use to get the ring-0 permissions ne…
Sure I get the warm fuzzies when a company like Google circa 2005 does something to help people with nothing obvious to gain from it. But in my experience companies like Google circa 2005 tend to become companies like Google circa 2019. People acting in their own interest are reliable.
Re: Microsoft finds privilege escalation vulnerability in Huawei driver
#73Earlier quoted context omitted.
What kind of minority group? They're religious kooks. That doesn't mean they deserve to be stamped out, necessarily, but they're also not a "minority group" by the common definition of the term.
[flagged]
Re: Microsoft finds privilege escalation vulnerability in Huawei driver
#74I guess, does it even matter at that point if you get ring-0 permissions? Probably shouldn't ever use their products regardless of the cause.
Re: Microsoft finds privilege escalation vulnerability in Huawei driver
#75Earlier quoted context omitted.
> I mean, it's goofy, hacky, and has obvious security flaws but doesn't look malicious. Plausible deniability. If you were to implement a backdoor for a company, would you write "professionally done" all over it?
So now every bug on a privilege boundary is a backdoor, because of "plausible deniability"?
Given the circumstances, one might wish to err on the side of caution.
Re: Microsoft finds privilege escalation vulnerability in Huawei driver
#76From scanning the page it sounds like Huawei used a hack to make their MateBookService unkillable, unremovable, by unhooking in to services.exe. That in the process of that they left the possibility that the device they were using HwOs.*\.sys was only protected from being used by checking the program had the right path, thus leaving it open to crackers (it being basically g+rw) to use to get the ring-0 permissions ne…
Not addressing the main point but the aside - I like it when companies have a clear financial interest in solving a problem. Sure I get the warm fuzzies when a company like Google circa 2005 does something to help people with nothing obvious to gain from it. But in my experience companies like Google circa 2005 tend to become companies like Google circa 2019. People acting in their own interest are reliable.
People are smarter than metrics. Increase the incentives and you also increase the incentive to cheat. Sometimes the best you can do is insulate people from incentives, so people have the leeway to do the right thing without acting against their own best interest.
Re: Microsoft finds privilege escalation vulnerability in Huawei driver
#77Earlier quoted context omitted.
What kind of minority group? They're religious kooks. That doesn't mean they deserve to be stamped out, necessarily, but they're also not a "minority group" by the common definition of the term.
[flagged]
Falun gong are han Chinese who chose to identify with a particular religious offshoot. That doesn't make them a minority group as westerners understand it. Would you call Mormons minorities?
Re: Microsoft finds privilege escalation vulnerability in Huawei driver
#78Earlier quoted context omitted.
Not addressing the main point but the aside - I like it when companies have a clear financial interest in solving a problem. Sure I get the warm fuzzies when a company like Google circa 2005 does something to help people with nothing obvious to gain from it. But in my experience companies like Google circa 2005 tend to become companies like Google circa 2019. People acting in their own interest are reliable.
The problem is that most incentives can be gamed. There are good and bad ways to get customers to buy more or make the stock price go up. People are smarter than metrics. Increase the incentives and you also increase the incentive to cheat. Sometimes the best you can do is insulate people from incentives, so people have the leeway to do the right thing without acting against their own best interest.
That said, regulatory incentives and punishments have their place too, IMO generally where the market isn't responding well, or information isn't available enough to allow for an efficient market, or as a response to some other regulatory market effects. But, as you noted, you'll often get some interesting behavior right at the edge of where the regulation kicks in because there's often a hard change instead of a gradual shift as an efficient market would allow.
Re: Microsoft finds privilege escalation vulnerability in Huawei driver
#79Earlier quoted context omitted.
With Win10 they do ship those drivers through Windows updates.
They’ve done it for previous versions as well. I think that practice goes back to Vista at the very least.
Re: Microsoft finds privilege escalation vulnerability in Huawei driver
#80Earlier quoted context omitted.
[flagged]
I don't think you engaged with my comment in good faith, here. Falun gong are han Chinese who chose to identify with a particular religious offshoot. That doesn't make them a minority group as westerners understand it. Would you call Mormons minorities?