elvith

joined 2 years ago
[–] elvith@feddit.de 2 points 1 year ago

Instructions unclear, dick stuck in jelly salad

[–] elvith@feddit.de 20 points 1 year ago

Peace was never an option

[–] elvith@feddit.de 3 points 1 year ago* (last edited 1 year ago)

*stone that throws itself

[–] elvith@feddit.de 3 points 1 year ago* (last edited 1 year ago) (1 children)

I found a blog post outlining exactly that. If you use it locally, it will install and start a service temporarily. That service runs as SYSTEM and invokes your command. To succeed, you need to be a local administrator.

If you try the same remote, it tries to access \\remote-server-ip\$admin and installs the service with that. To succeed your current account on your local machine must exist on the remote machine and must be an administrator there.

So in short: It only works, if you've already the privilege to do so and the tool itself is not (ab)using a privilege escalation or something like that. Any hacker and virus may do the very same and doesn't need psexec - it's just easier for them to use that tool.

[–] elvith@feddit.de 9 points 1 year ago

665.999999657838 the floating point number of the beast

[–] elvith@feddit.de 17 points 1 year ago

Pretendstation Network when? (Context)

[–] elvith@feddit.de 4 points 1 year ago (3 children)

Never thought about that, but since these tools just work, when you copy them to your PC.... how does psexec do that? It'd either need you to be an administrator (and then it's not really a privilege escalation as you could have registered any program into the task scheduler or as a service to run as SYSTEM) or it'd need a delegate service, that should only be available when you use an installer - which again wasn't was has been done when just copying the tool.

[–] elvith@feddit.de 15 points 1 year ago

Grundsätzlich ja, aber eine Bahn mit Betrunkenen zu teilen ist je nach Anzahl und deren Verhalten auch nicht gerade schön...

Pluspunkt ist da tatsächlich, dass diejenigen gerade nicht am Steuer sitzen.

[–] elvith@feddit.de 11 points 1 year ago (6 children)

Also please pre-install the sysinternals suite, thanks

[–] elvith@feddit.de 17 points 1 year ago

Do you know the term "trust thermocline"?

Basically it described a problem with the boiling the frog technique. There's a point for every user at which they're fed up with the bullshit, lose all trust in you(r company) and are hard to impossible to get back as a customer. Every customer leaving has a little unnoticeable effect on you, but with time there will be so many people that you lost that all your tactics to lock your users in will fail.

[–] elvith@feddit.de 4 points 1 year ago

When I go back to play a modded Fallout, I do 4.

Do so now and be quick, or wait a while. In a few days a huge next-gen update is dropping and everyone expects mods to be broken afterwards unless they are fixed. Since modding is usually done on PC, you may be able to downgrade the version, but it's more work.

[–] elvith@feddit.de 8 points 1 year ago (1 children)

I read it as "no, we won't use your data for advertising, but collect it anyways. If you ever dare to stop paying, we'll retroactively process this data, too"

view more: ‹ prev next ›