The main issue with this is that the computer is compromised before this attack can occur. The user has already fallen prey to a virus. This exploit isn't a super urgent priority really because it only affects already compromised PCs.
to deploy the PlugX remote access trojan (RAT) malware and gain persistence on compromised systems
Wait it already requires a compromised system?
However, user interaction is required for successful exploitation, as it involves tricking potential victims into visiting a malicious page or opening a malicious file.
Yep! So it's essentially just user error, with the user downloading a virus, which then lets attackers do other stuff. So......a virus.
They definitely made it sound more "fuck windows!" in the title though, which is nice hey?
It is, therefore, impossible to eliminate them
If anyone says something like this in regard to technology they're raising a red flag about themselves immediately.
Oh no!
The issue, which turned up in the non-security preview update for Windows 11 (KB5067036)
Oh so it's nothing. Don't join the Windows Insider program unless you are ok with getting bugs, and when you do get bugs - report them. That's what it's for! It's NOT for regular everyday Joe Blow to run on their personal machine.
Yeh but with 2FA the password is essentially irrelevant because no one other than you can get in even if they have your password, so why not just skip it?
What downsides are there to passwordless authentication in your mind?
The "Aboriginal deaths in custody" thing is a joke. They count an Aboriginal that stole a car, took off when they saw the sirens turn on behind them, and immediately crashed into a power pole killing themself instantly, as a "Aboriginal death in custody". They counted a few young teenage Aboriginals who were committing a break and enter/robbery, who ran when the police rocked up while they were in the act, then jumped into a river to try and escape the police and drowned, as an "Aboriginal death in custody".
An aboriginal person going on a mass shooting rampage at a school, who was shot dead by police, would be counted as an "Aboriginal death in custody" and used as a stat to say how Indigenous people are being treated poorly ffs. This is from the definition btw:
In cases where police were clearly in the process of detaining or attempting to detain a person immediately prior to their death, such as during shootings, sieges, raids and pursuits, the person is considered to have been in custody at the time of death.
Source: https://www.aic.gov.au/explanatory-notes
Those are the explanatory notes for this: https://www.aic.gov.au/statistics/deaths-custody-australia
When you actually look at the data that the royal commission found, it's a complete joke. There's nothing to actually do because there's not an actual problem.
It's all just a big "in theory" really. It's "insecure" in that if someone knows the telco you are with, and the telco that you're with doesn't follow procedures to verify that a caller is who they say they are, you could have someone else steal your phone number by getting a replacement sim card sent to them.
In reality it's nothing to worry about. Like..........at all. Every telco I've been with sends you a sms to confirm that you requested a new SIM card, and that's after they've confirmed that you are who you say you are via sending you a code on your phone number or email.
To make it worse, SMS is incredibly insecure. Nothing should send you codes via SMS
Theoretically sure, but the chances of anyone getting their SMS hacked and their 2FA code being used to compromise their account is so infinitesimally small that it's not even worth mentioning.
Because passwordless authentication is awesome and needs to be the standard. It's basically just skipping the password and going straight to 2FA, which is the main security behind any account that you've got 2FA on.
Same why no one (except maybe disabled people or totally technically clueless ones) would need an LLM to toggle HDR or adjust brightness/volume/whatever. ..... ok, bad example as i actually do that in a smart-home
Having copilot built in to windows is basically "smart-home"-ing your computer. No one needs to ask home assistant to turn off their lights, but it damn sure is handy and most often faster than doing it manually - same with my example of turning HDR on/off.
Having it built in means you could ask it to interact with every piece of your computer. If you can't see how there is no USE for this, you've got a very narrow mind and no ability to think outside the box.
"Gamblers targeted by gambling sites"
"Company targets their core demographic"
Mild shock!