dc0de wrote:

But now that a couple of years have passed and the issue has not resolved, Boileau decided to release the tool on his website.

because Microsoft didn't consider it a "vulnerability"? a COUPLE of YEARS!!!

Come on people, hold your software vendor to a higher standard.

*comments from a noob follow*

If an attacker can read and write to arbitrary locations in physical memory, what's MS to do? Page critical data to disk? And if -as Acidus mentions here- this attack lets you inject arbitrary code into the system, you're totally screwed... Right?

RE: Hack into a Windows PC - no password needed - Security - Technology - smh.com.au