Welcome to WebmasterWorld Guest from 54.147.232.40

Forum Moderators: bill

Message Too Old, No Replies

Win 10 Attack Surface Grows with Linux Support in Anniversary Update

     
2:43 pm on Aug 10, 2016 (gmt 0)

Administrator from JP 

WebmasterWorld Administrator bill is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Oct 12, 2000
posts:14960
votes: 125


Windows 10 Attack Surface Grows with Linux Support in Anniversary Update [threatpost.com]

Microsoft’s release of Windows Anniversary Update last week included an optional feature called Windows Subsystem for Linux that allows native support for Linux binaries. That has some security experts concerned the Windows 10 attack surface has been expanded.

The threat, according to Alex Ionescu, vice president of endpoint detection and response strategy at Crowdstrike, centers on a capability that allows for some Ubuntu Linux features to run within the Windows 10 operating system. Ionescu, who discussed his research with Threatpost last week at Black Hat USA, said modified Linux code could make system calls to Windows APIs and execute malicious actions within the Windows environment.
3:16 pm on Aug 11, 2016 (gmt 0)

Administrator from GB 

WebmasterWorld Administrator engine is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:May 9, 2000
posts:23932
votes: 477


I was reading about this and it seems by allowing Linux on there is the problem, not Linux itself, but the fact it can operate on the system.

While useful for developers in operating system tests, this policy also allows a user to boot whatever they wish, including self-signed binaries. The "golden key" debug and unlocking policy problem has emerged due to design flaws in the policy loading system. Security failures have created "golden keys" which unlock Windows devices protected by Secure Boot. [zdnet.com]


I suspect this problem needs more attention, and may become a major security issue.
 

Join The Conversation

Moderators and Top Contributors

Hot Threads This Week

Featured Threads

Free SEO Tools

Hire Expert Members