Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The "GUI" is in the kernel (gdi32.ll, user32.dll, comdlg32.dll, etc). What you see at the CTRL+ALT+DEL screen is actually the "SYSTEM" user's desktop.

You are, however, technically correct, but finding arbitrary code execution vulnerabilities in the "GUI" these days is not a trivial task. And if you've done that, you can do anything you want to the system.

As Raymond Chen (Windows API developer) would say "that would involve being on the other side of this airtight hatchway".



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: