Security

522 readers

6 users here now

A community for discussion about cybersecurity, hacking, cybersecurity news, exploits, bounties etc.

Rules :

All instance-wide rules apply.
Keep it totally legal.
Remember the human, be civil.
Be helpful, don't be rude.

Icon base by Delapouite under CC BY 3.0 with modifications to add a gradient

founded 1 year ago

MODERATORS

[email protected]

Galactical Bug Hunting: How we discovered new issues in CD Projekt Red’s Gaming Platform (www.anvilsecure.com)

submitted 7 months ago by testeronious to c/[email protected]

1 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 0 points 7 months ago

As soon as they mentioned FixDirPrivileges as a command sent over IPC to a privileges process, I knew it was over. Being able to give read-write access to "Everybody" simply by sending a command is asking for trouble. They might've even taken the long route of creating a DLL that the privileged process loads. Is it no possible to replace the privileged process altogether with any random binary?

Anti Commercial AI thingy

CC BY-NC-SA 4.0