Default location when drive removed

English support forum

Moderators: white, Hacker, petermad, Stefan2

User avatar
Hacker
Moderator
Moderator
Posts: 13065
Joined: 2003-02-06, 14:56 UTC
Location: Bratislava, Slovakia

Re: Default location when drive removed

Post by *Hacker »

Phred,
when something has remote root access to your machine(s), not only could your backup generations contain corrupted, un-noticed, photos and documents going back years (viewed wedding photos lately..?), but you could be inadvertently funding someone else's crypto-currency mining electricity demands, acting as a bot in a DDoS flood, sitting as an identifiable node in criminal activity. etc etc
You don't need admin rights for any of that.

Roman
Mal angenommen, du drückst Strg+F, wählst die FTP-Verbindung (mit gespeichertem Passwort), klickst aber nicht auf Verbinden, sondern fällst tot um.
User avatar
Horst.Epp
Power Member
Power Member
Posts: 6489
Joined: 2003-02-06, 17:36 UTC
Location: Germany

Re: Default location when drive removed

Post by *Horst.Epp »

Hacker wrote: 2018-10-25, 16:00 UTC Phred,
when something has remote root access to your machine(s), not only could your backup generations contain corrupted, un-noticed, photos and documents going back years (viewed wedding photos lately..?), but you could be inadvertently funding someone else's crypto-currency mining electricity demands, acting as a bot in a DDoS flood, sitting as an identifiable node in criminal activity. etc etc
You don't need admin rights for any of that.

Roman
Thats right for some viruses or trojans but not for all of them.
But doing nothing and always working as Admin is not the solution to solve todays security problems.
Windows 11 Home x64 Version 23H2 (OS Build 22631.3447)
TC 11.03 x64 / x86
Everything 1.5.0.1372a (x64), Everything Toolbar 1.3.3, Listary Pro 6.3.0.73
QAP 11.6.3.2 x64
User avatar
Hacker
Moderator
Moderator
Posts: 13065
Joined: 2003-02-06, 14:56 UTC
Location: Bratislava, Slovakia

Re: Default location when drive removed

Post by *Hacker »

Horst.Epp,
Horst.Epp wrote:Thats right for some viruses or trojans but not for all of them.
Those that need admin rights either request them specifically or do something out of the above mentioned scope.
Horst.Epp wrote:doing nothing and always working as Admin is not the solution to solve todays security problems
Hacker wrote:I understand and accept the general idea behind this notion
Roman
Mal angenommen, du drückst Strg+F, wählst die FTP-Verbindung (mit gespeichertem Passwort), klickst aber nicht auf Verbinden, sondern fällst tot um.
User avatar
Phred
Senior Member
Senior Member
Posts: 375
Joined: 2009-06-16, 15:24 UTC
Location: SEAu

Re: Default location when drive removed

Post by *Phred »

So say we all.
Well, almost... now we have to talk to Author Ghisler about \totalcmd

(Inhibiting admin privileges, while not eliminating all likely attacks, greatly reduces the 'attack surface' and deters attempts to exploit, I think we could all agree. Almost all.)
Regards, PhredE
Licence holder since 1999
Awaiting a $D donors-token for the title-bar so we can display that we have donated further.
Post Reply