elvith

joined 1 year ago
MODERATOR OF
[–] [email protected] 18 points 6 months ago

Peace was never an option

[–] [email protected] 3 points 6 months ago* (last edited 6 months ago)

*stone that throws itself

[–] [email protected] 3 points 7 months ago* (last edited 7 months ago) (1 children)

I found a blog post outlining exactly that. If you use it locally, it will install and start a service temporarily. That service runs as SYSTEM and invokes your command. To succeed, you need to be a local administrator.

If you try the same remote, it tries to access \\remote-server-ip\$admin and installs the service with that. To succeed your current account on your local machine must exist on the remote machine and must be an administrator there.

So in short: It only works, if you've already the privilege to do so and the tool itself is not (ab)using a privilege escalation or something like that. Any hacker and virus may do the very same and doesn't need psexec - it's just easier for them to use that tool.

[–] [email protected] 9 points 7 months ago

665.999999657838 the floating point number of the beast

[–] [email protected] 17 points 7 months ago

Pretendstation Network when? (Context)

[–] [email protected] 5 points 7 months ago (3 children)

Never thought about that, but since these tools just work, when you copy them to your PC.... how does psexec do that? It'd either need you to be an administrator (and then it's not really a privilege escalation as you could have registered any program into the task scheduler or as a service to run as SYSTEM) or it'd need a delegate service, that should only be available when you use an installer - which again wasn't was has been done when just copying the tool.

[–] [email protected] 15 points 7 months ago

Grundsätzlich ja, aber eine Bahn mit Betrunkenen zu teilen ist je nach Anzahl und deren Verhalten auch nicht gerade schön...

Pluspunkt ist da tatsächlich, dass diejenigen gerade nicht am Steuer sitzen.

[–] [email protected] 11 points 7 months ago (6 children)

Also please pre-install the sysinternals suite, thanks

[–] [email protected] 17 points 7 months ago

Do you know the term "trust thermocline"?

Basically it described a problem with the boiling the frog technique. There's a point for every user at which they're fed up with the bullshit, lose all trust in you(r company) and are hard to impossible to get back as a customer. Every customer leaving has a little unnoticeable effect on you, but with time there will be so many people that you lost that all your tactics to lock your users in will fail.

[–] [email protected] 4 points 7 months ago

When I go back to play a modded Fallout, I do 4.

Do so now and be quick, or wait a while. In a few days a huge next-gen update is dropping and everyone expects mods to be broken afterwards unless they are fixed. Since modding is usually done on PC, you may be able to downgrade the version, but it's more work.

[–] [email protected] 9 points 7 months ago (1 children)

I read it as "no, we won't use your data for advertising, but collect it anyways. If you ever dare to stop paying, we'll retroactively process this data, too"

[–] [email protected] 5 points 7 months ago

[X] all of the above

view more: ‹ prev next ›