Conversation

Notices

1. Embed this notice
   Expertenkommision Cyberunfall (expertenkommision_cyberunfall@mastodon.social)'s status on Saturday, 06-Apr-2024 22:21:18 JST Expertenkommision Cyberunfall

   in reply to

   • Kevin Beaumont
   • Jørn

   @jornane @GossiTheDog

   “The Security of Using __COMPAT_LAYER
   Setting __COMPAT_LAYER to RunAsInvoker does not actually give you administrator privileges if you do not have them; it simply prevents the UAC pop-up from appearing and then runs the program as whatever user called it. “
   https://stackoverflow.com/questions/37878185/what-does-compat-layer-actually-do/37881453#37881453

   • Embed this notice
     Jørn (jornane@ipv6.social)'s status on Saturday, 06-Apr-2024 22:21:20 JST Jørn

     • Kevin Beaumont

     @GossiTheDog ..does this work?

   • Embed this notice
     Ben (ben_zen@social.sdf.org)'s status on Sunday, 07-Apr-2024 01:20:08 JST Ben

     • Kevin Beaumont
     • Jørn

     @GossiTheDog

     @expertenkommision_cyberunfall @jornane

     It's not a bypass at all, though. It just runs it at the same privilege. Here's Raymond's remarks: https://devblogs.microsoft.com/oldnewthing/20161117-00/?p=94735