Reply to thread

Message

<blockquote data-quote="ForgottenSeer 823865" data-source="post: 845901">Windows is insecure by default since it&#039;s creation, why? 1- you are on admin account by default and will run almost everything on high privileges. Totally insane. Even SUA is just an admin account stripped of some privileges, not really a separate account. 2- too many useless services, interpreters and executables (LOLbins/LOLscripts) present by default which aren&#039;t even needed by average Joe. 3- it is popular and like any popular OS, it is more targeted.Now, like me you can limit attack vectors by using built-in features (GPO, SRP, Applocker, etc...) or 3rd party security softs, most will be default-deny mechanism. But all this will be useless if a dedicated attacker find kernel exploits (like Eternalblue) which can only be eradicated via an OS patch and nothing else. Reason all security vendors never mentioned about stopping kernel exploit is just because they can&#039;t protect you against it, and if one say it does, be sure it is just blatant marketing BS.</blockquote>

[QUOTE="ForgottenSeer 823865, post: 845901"] Windows is insecure by default since it's creation, why? 1- you are on admin account by default and will run almost everything on high privileges. Totally insane. Even SUA is just an admin account stripped of some privileges, not really a separate account. 2- too many useless services, interpreters and executables (LOLbins/LOLscripts) present by default which aren't even needed by average Joe. 3- it is popular and like any popular OS, it is more targeted. Now, like me you can limit attack vectors by using built-in features (GPO, SRP, Applocker, etc...) or 3rd party security softs, most will be default-deny mechanism. But all this will be useless if a dedicated attacker find kernel exploits (like Eternalblue) which can only be eradicated via an OS patch and nothing else. Reason all security vendors never mentioned about stopping kernel exploit is just because they can't protect you against it, and if one say it does, be sure it is just blatant marketing BS. [/QUOTE]

Verification