Wow, that sounds like a silly question, but really! My wife froze bananas in the freezer with the peel still on. You can't peel them frozen. I put it in the microwave for one minute at 50% power. After 30 seconds the thin end of the peel (where a bunch connect to each other) was on fire, with a v...
@packs Actually, that's one I was not aware of. I know a bit about SANS in that they exist and are a security-oriented organization, but didn't know they had a blog. Guess there's another one to add to my "Morning Coffee"
Perhaps this question should be a bit elementary for our community, but it's something I'm still not educated on - so I'm throwing it out here. Please let me know if it's worth posting an actual question:
How can the TOCTTOU vulnerability in Windows best be mitigated?
Example (albeit one that in a perfect world shouldn't be in practice): An end-user is temporarily given Administrator rights in order to install software for their job. The user is then removed from the Administrators group, but re-adds themselves to it before logging off. How could this be prevented?
@makerofthings7 Instead of vote to close, flag it for moderator attention and leave them a note that it should be moved. They'll review it and move if appropriate.
What are some ways to mitigate the time-of-check-to-time-of-use issues that apply to Windows permissions?
Example:
End-user is added to the local Administrators group in order to install software, printers, etc.
The user's account is removed from the Administrators group while the user is logg...
@packs Again, not at all disagreeing with his answer but this is for an environment where I'm sure that it will be quicker/easier to address the TOCTTOU issue than it is to address the Admin rights issue - although the latter definitely should (and hopefully will) be addressed as well.
And, I was hoping to address the overall TOCTTOU issue (as in, I'm pretty sure Admin rights aren't the only thing affected by this) instead of just this one specific case.
@Iszi I'm a bit dubious about your new "current-events" tag. First, I don't think the Egypt question needs it - I expect the question and responses to be written so they are valid for a long time, rather than being some sort of breaking news story. But beyond that do we really want to encourage "current-events" questions, and tag and un-tag them as the situation changes?
Internet service was widely disrupted in Egypt starting Jan 27th, in the space of about 20 minutes:
How Egypt Killed the Internet
As described at On the ground amid Egyptians' protests It disrupted much more than browsing and messaging:
The handful of bellhops working at the
Sheraton Hotel...
Odd - I see a starred link to a sans story by @packs from a few minutes ago, but I don't see it here in the chat stream.
Ahh - after refreshing the screen I see it was 3 hours ago, and the part of the url I searched for is visible in the starred comment but not in the chat stream (part of the "..."). So when do timestamps on the "starred" list get updated?
not so bad - miserable winter weather outside, which I'm going to have to venture out in in a couple of hours for band practice, so I'm happy it's toasty warm here in my office
Any civilization that excelled at engineering as did the Romans, and whose mathematical system was largely indistinguishable from their alphabet must be pretty stinking good at the math bits.
No offense to @AviD or @GrahamLee - The answers provided have some good information, but it's not directly useful in terms of resolving the question posed.
What are some ways to mitigate the time-of-check-to-time-of-use issues that apply to Windows permissions?
Example:
End-user is added to the local Administrators group in order to install software, printers, etc.
The user's account is removed from the Administrators group while the user is logg...
Internet service was widely disrupted in Egypt starting Jan 27th, in the space of about 20 minutes:
How Egypt Killed the Internet
As described at On the ground amid Egyptians' protests It disrupted much more than browsing and messaging:
The handful of bellhops working at the
Sheraton Hotel...
