Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Guess what? Hot off the press.

"Razer mouse software bug easily grants Windows admin privileges"

https://www.slashgear.com/razer-mouse-software-bug-easily-gr...



I'd bet good money that there are hundreds if not thousands of other buggy installers lurking on windows update, just waiting for the right hardware id to appear. Yes, this is a bit of a shortcut, but not really any different than booting from a USB drive and changing the admin password. Adding Bitlocker to the mix is where it starts to get interesting.


Another article on the same topic discussed on HN:

https://news.ycombinator.com/item?id=28273283


Love Razer mice, but never install their software. And, yes, the way their installer starts via Windows Update should be prevented by Windows.


I can't imagine blaming this one on Razer. It's a fundamental defect in Windows.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: