Vista hacked at Black Hat
While Microsoft is asking hackers to try and break Vista, the damn thing is already hacked! Joanna Rutkowska, a Polish researcher, hacked Vista while at the Black Hat conference in Las Vegas. She showed that it is possible to bypass security measures in Vista and allowing any unsigned device driver to be loaded. The demo was done with the Windows Vista Beta 2 kernel, x64 edition, that should prevent unsigned code from running. But there is more… in a second part of her talk, Rutkowska explained how it is possible to use virtualization technology to make malicious code undetectable, in the same way a rootkit does. She code-named this malicious software Blue Pill (via news.com).
I believe she had to turn off User Account Protection in order to do any of this…
@Sean: “It should be noted that Rutkowska used an early test version of Vista in her demonstration and that Vista needs to be running in administrator mode to launch the attack. Microsoft’s User Account Control, a Vista feature designed to run a PC with few user privileges, would prevent Rutkowska’s attack.”
Read on: http://www.technewsworld.com/story/52254.html