Conversation

Notices

1. Embed this notice
   Kevin Beaumont (gossithedog@cyberplace.social)'s status on Saturday, 19-Oct-2024 23:14:47 JST Kevin Beaumont

   > purchased a wireless headset
   > plugged in the supplied USB dongle
   > interactive installer pops up
   > find way to get SYSTEM rights within 10 minutes from standard user
   > end up not playing Flight Simulator as planned

   • Embed this notice
     Fellows (fellows@cyberplace.social)'s status on Saturday, 19-Oct-2024 23:30:38 JST Fellows

     in reply to

     @GossiTheDog it’s just a little headset, it can’t hurt anything :)

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 21-Oct-2024 07:37:17 JST Kevin Beaumont

     in reply to

     So I just went back and had a quick look at this (using off the shelf USB devices -> get SYSTEM from local non-admin user) and discovered a way to do it on remote systems using RDP.

     Better still, you don’t need the actual USB device - you can just spoof the device. Also it’s enabled out the box and feature is turned on by default.

   • Embed this notice
     Hambone Fakenamington (centuryavocado@fosstodon.org)'s status on Monday, 21-Oct-2024 07:41:16 JST Hambone Fakenamington

     in reply to

     @GossiTheDog thought the razer one was already known about. Or maybe I'm thinking incorrectly and it was HP input device drivers with similar flaws.