Reply to thread

Message

<blockquote data-quote="bazang" data-source="post: 1100361" data-attributes="member: 114717">You are literally stating what [USER=7463]@cruelsister[/USER] shows in the video... that &quot;Windows by default is focused on &#039;usability&#039; [and is insecure].&quot;There is no manipulation in the video &quot;by omission.&quot; If every POC, pentest demo, or video creator had to &quot;inform the viewer&quot; of all the technical infos, of all the exceptions to what they are showing - then nobody in the industry would do the work. The video is in a format that is standard industry practice. Besides, the video is targeted to an audience that understands what is being shown. If they do not understand, then it is on them to put in the effort to figure it all out.Really? Please provide a few links to evidence that corroborate this statement. What you need to provide is documented proof that a single pentester executed a malware, and that malware was able to manipulate, tamper with, and hijack &quot;a safe Windows process&quot; outside of containment to establish comms.When you do that everybody here will shut up forever. We will wait...Because it can be configured to generate outbound connection alerts.Didn&#039;t you just say &quot;Windows by default is insecure because it is configured for usability&quot;? Yeah. You did say that. Not exactly in those words but you did say it multiple times. So not only are you saying default Windows is insecure, that the insecure Windows defaults are the right configuration for average users.You do realize that hundreds and hundreds of millions of people do stuff that infects their Windows OS every year, right?The prevailing, widely-accepted fact in the IT security industry is that Windows, by default, is highly insecure and that is not good for anyone. You do know that, right? You just choose to ignore it because it suits your agenda.It is just a demo video. Nothing more. Nothing less. It is representative of something that is regularly seen at BlackHat, DefCon, Wild West Hackin&#039; Fest, or even a local BSides meeting.People that keep reading nefarious or manipulative intent on [USER=7463]@cruelsister[/USER] &#039;s part... well, all anybody can say about that is that it is more about the person&#039;s interpretation of the video than it is about the video author.</blockquote>

[QUOTE="bazang, post: 1100361, member: 114717"] You are literally stating what [USER=7463]@cruelsister[/USER] shows in the video... that "Windows by default is focused on 'usability' [and is insecure]." There is no manipulation in the video "by omission." If every POC, pentest demo, or video creator had to "inform the viewer" of all the technical infos, of all the exceptions to what they are showing - then nobody in the industry would do the work. The video is in a format that is standard industry practice. Besides, the video is targeted to an audience that understands what is being shown. If they do not understand, then it is on them to put in the effort to figure it all out. Really? Please provide a few links to evidence that corroborate this statement. What you need to provide is documented proof that a single pentester executed a malware, and that malware was able to manipulate, tamper with, and hijack "a safe Windows process" outside of containment to establish comms. When you do that everybody here will shut up forever. We will wait... Because it can be configured to generate outbound connection alerts. Didn't you just say "Windows by default is insecure because it is configured for usability"? Yeah. You did say that. Not exactly in those words but you did say it multiple times. So not only are you saying default Windows is insecure, that the insecure Windows defaults are the right configuration for average users. You do realize that hundreds and hundreds of millions of people do stuff that infects their Windows OS every year, right? The prevailing, widely-accepted fact in the IT security industry is that Windows, by default, is highly insecure and that is not good for anyone. You do know that, right? You just choose to ignore it because it suits your agenda. It is just a demo video. Nothing more. Nothing less. It is representative of something that is regularly seen at BlackHat, DefCon, Wild West Hackin' Fest, or even a local BSides meeting. People that keep reading nefarious or manipulative intent on [USER=7463]@cruelsister[/USER] 's part... well, all anybody can say about that is that it is more about the person's interpretation of the video than it is about the video author. [/QUOTE]

Verification