Thread: Ring "0"
View Single Post
Old 02-26-06, 11:52 AM   #2
Wim Libaers
Samurai Navy
 
Join Date: Sep 2001
Location: Flanders
Posts: 569
Downloads: 4
Uploads: 0
Default Re: Ring "0"

Quote:
Originally Posted by Mustang
as for starForce it has Ring 0, in my opinion, I think that's way too much access for a commercial software other then a firewall. But here's the thing. A hacker has to get passed your firewall in order to even try to use SF's ring status and in order to circumvent your firewall he'd already have access to your computer from your firewall, so it would be pointless for him to want SFs too because in a sense once he's passed your FireWall he already has ring 0. My suggestion, find a CPU that dosn't use this system of control, the ring system is old and as with all technology becoming more and more vulnerable as it ages on.
Me, I'll just wait for the new CELL CHIP coming out.
Not necessarily. Getting through a firewall usually doesn't mean actually hacking the firewall software itself (which would give ring 0 access), but exploiting the fact that the firewalls are not configured to stop all bad traffic, and that applications that are allowed to pass traffic through the firewall are unsafe. So, when someone gets through the firewall, they usually do not get access to the firewall internals, but to a flawed program behind the firewall, usually not in ring 0. From there, they try to perform other attacks for privilege escalation to get to ring 0. More stuff in ring 0 means they get more opportunities to try this.
Wim Libaers is offline   Reply With Quote