Mysterious user account - Page 2
Page 2 of 2 FirstFirst 12
Results 11 to 13 of 13

Thread: Mysterious user account

  1. #11
    HYBR|D
    Guest
    ^^ Seems our pet is starting to loose it's touch.

    forgot to inlude the url to the referenced article.

  2. #12
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,191
    Props to Donald on this one, I was not aware that Windows did such a thing?

    Unfortunately he has left out the link to the MVP's article

    @ joem11

    This looks like nVidia making things convenient for themselves, but potentially compromising your security in the process.........please see the interesting link posted by bludgeon.

    I am about to build a machine with onboard and independent nVidia graphics so I will be able to see if this account and SLI work together, or if it is just a gaming and/or laptop utility.

    The reason I posted in the first place was that it created a potential security hazard on a machine where it had no functionality whatsoever. It should at least have been local rather than global?


    //off topic:

    I think that I am beginning to see how Donald works..........at first I thought his stuff was way off target, but now that just seems to be my narrow minded approach at the time.

    He appears to provide additional information, not specific to the post in question...........a bit like the "obiter dicta" of high (supreme) court judges? //



    EDIT:

    @ HYBR|D

    You beat me to it! .........breakfast interrupted my post . I have edited Donald's contribution slightly to make more sense, and put it in context.
    Last edited by nihil; August 20th, 2011 at 08:11 AM.
    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

  3. #13
    @ΜĮЙǐЅŦГǻţΩЯ D0pp139an93r's Avatar
    Join Date
    May 2003
    Location
    St. Petersburg, FL
    Posts
    1,689
    Quote Originally Posted by nihil View Post
    This looks like nVidia making things convenient for themselves, but potentially compromising your security in the process.........please see the interesting link posted by bludgeon.
    This may be a blessing in disguise for security. If you were to have (on a business/pro Windows) multiple "admin" level accounts for specific applications such as GFI LANGuard, application updaters, etc... you can add them all into specific security groups to facilitate locking down the machine.

    This will allow you to grant them the needed admin rights, while subjecting them to GPO and file/registry permissions that you would not be able to reasonably apply to Local System, Local Service, or Network Service. If one of them is compromised for any reason, they would not have that critical access that the compromise would need to take over the system. It will never be perfect, but it will allow that extra mitigation capability.

    The way I see it, limiting possible compromise scope is just as important as limiting attack surface and direct compromise. Proper file permissions on temporary folders is the best defense against browser 0days, and the same can be said for any high risk application.
    Real security doesn't come with an installer.

Similar Threads

  1. Logwatch
    By steve.milner in forum IDS & Scanner Discussions
    Replies: 5
    Last Post: August 12th, 2004, 12:23 PM
  2. Windows XP Tips
    By Nokia in forum Tips and Tricks
    Replies: 4
    Last Post: June 18th, 2004, 04:24 PM
  3. creating a user account in redhat 7.1 (command line stuff)
    By mrleachy in forum *nix Security Discussions
    Replies: 4
    Last Post: October 18th, 2002, 01:27 PM
  4. Network Vulnerabilities and Countermeasures
    By Joey_Batch_File in forum The Security Tutorials Forum
    Replies: 10
    Last Post: September 20th, 2002, 09:03 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides