Monday 3 December 2012

Re: Last Post - Priv Escalation

Just a short piece outlining a flaw in the privilege separation/enforcement doctrine I was explaining in my last article.

As said, in "usermode" there is "user" and "root", wherin user has extremely limited privileges as compared to "root". There is also the "middle ground" wherin a user has "sudo" privileges, wherin they can execute some actions as if they were an administrator.

I also outlined how if a "user" once had these privileges, and they were lost, they may still have "hooks" in place (psychological hooks) that allow them unwanted access at a later date.

Now to explain what this "sudo" really is... It is the unfettered trust offered by a close relationship, especially where romance is involved. Wherin one opens oneself up to an unthinkable degree to another person, rendering themselves vulnerable. In essence, the "heart".

The problems this can cause are immense. People who are attracted to someone often allow the person they are attracted to an unwarranted level of trust, in the hope the other person will reciprocate.

This leads to major problems in the event the other person decides to abuse this... Essentially gaining some degree of control over the overardent paramour who wishes for things to work out. Most often seen in abusive or suchlike relationships where one person is abusing the other persons trust to an unimaginable degree, but because they have enough "privileges" to do so, the person being royally fucked over does not see this until it is already too late.

Why do I explain it like so? Well, imagine what happens after a normal relationship splits up. There will be "fragments" left floating around both persons "filesystems", often fragments which are "privileged". These essentially are the psychological hooks left behind after a relationship which makes one want to "try again". Unless the person removes those, they will be incapable of correctly moving on, completely fucking up future relationships.

What the main message here is, no matter how locked down your "Trust No One" shit is, once you let someone in... it is incredibly hard to get rid of them without spending a good amount of time working on it.

No comments:

Post a Comment