elvith

joined 1 year ago
[–] [email protected] 20 points 6 months ago

Peace was never an option

[–] [email protected] 3 points 7 months ago* (last edited 7 months ago) (1 children)

I found a blog post outlining exactly that. If you use it locally, it will install and start a service temporarily. That service runs as SYSTEM and invokes your command. To succeed, you need to be a local administrator.

If you try the same remote, it tries to access \\remote-server-ip\$admin and installs the service with that. To succeed your current account on your local machine must exist on the remote machine and must be an administrator there.

So in short: It only works, if you've already the privilege to do so and the tool itself is not (ab)using a privilege escalation or something like that. Any hacker and virus may do the very same and doesn't need psexec - it's just easier for them to use that tool.

[–] [email protected] 9 points 7 months ago

665.999999657838 the floating point number of the beast

[–] [email protected] 5 points 7 months ago (3 children)

Never thought about that, but since these tools just work, when you copy them to your PC.... how does psexec do that? It'd either need you to be an administrator (and then it's not really a privilege escalation as you could have registered any program into the task scheduler or as a service to run as SYSTEM) or it'd need a delegate service, that should only be available when you use an installer - which again wasn't was has been done when just copying the tool.

[–] [email protected] 11 points 7 months ago (6 children)

Also please pre-install the sysinternals suite, thanks

[–] [email protected] 17 points 7 months ago

Do you know the term "trust thermocline"?

Basically it described a problem with the boiling the frog technique. There's a point for every user at which they're fed up with the bullshit, lose all trust in you(r company) and are hard to impossible to get back as a customer. Every customer leaving has a little unnoticeable effect on you, but with time there will be so many people that you lost that all your tactics to lock your users in will fail.

[–] [email protected] 9 points 7 months ago (1 children)

I read it as "no, we won't use your data for advertising, but collect it anyways. If you ever dare to stop paying, we'll retroactively process this data, too"

[–] [email protected] 5 points 7 months ago

[X] all of the above

[–] [email protected] 11 points 7 months ago

Dad, are we really trying to create combustible lemons?

Yes, we arson!

[–] [email protected] 24 points 7 months ago (2 children)

When life gives you lemons, don’t make lemonade. Make life take the lemons back! Get mad! I don’t want your damn lemons, what the hell am I supposed to do with these? Demand to see life’s manager! Make life rue the day it thought it could give Cave Johnson lemons! Do you know who I am? I’m the man who’s gonna burn your house down! With the lemons! I’m gonna get my engineers to invent a combustible lemon that burns your house down!

Cave Johnson

[–] [email protected] 4 points 7 months ago (1 children)

I use Arch btw

[–] [email protected] 24 points 7 months ago (3 children)

Too bad, that its just made up. Check e.g. this video here.

https://youtu.be/ctuZ54MwVZU

view more: ‹ prev next ›