Gameguru Mania

[ggrobot]

A public proof-of-concept called BrokenPipe shows that a standard Windows user can raise privileges to NT AUTHORITYSYSTEM through Steam’s Client Service.

Researcher KillaBoi published the demonstration on GitHub and said it was tested on Steam 10.96.30.42 on fully updated 64-bit Windows 10 and 11. The service already runs a...

Read more...

Source: Gameguru Mania
GGMania RSS - Daily Gaming/Technology News

[Csimbi]

Haha, let the fun begin!

[Sabot]

That’s why Steam is a steaming pile of shit!
How anyone can back Valve is deluded.
Imagine if the world went back to pre 2000 and we all had physical discs and installed/uninstalled as we used to do, without the fucking internet being needed for single player - especially steam. I don’t care for its kindergarten forums and unmoderated use of AI now to vet posts such as ‘this game is worse than cancer’, or, ‘not getting any money off me, robbing bastards’.
No wonder kids as young as 9 walk about speaking like this and have no rules

[NakedFaerie]

so its really rare for this to be a problem.
1, you have to have direct access to the PC so its not a remote attack socar factor is 0.
2, you have to have an account already but without system access.
So whats that. 0.00000001 of users. ok.
Then that 3 users need to know how to do this expliot.
and wow, they have system access.

Would be a lot easier to use other means to get a system accouts password.
Thats a perminate exploit micrtosoft cant fix so care factor for this exploit is 0 thats why valve is doing nothing. its so little its pretty much nothing.
eventually they will patch it but as they have their own OS without that bug they dont care. its on buggy windows with thousands of exploits so 1 very neiche local account exploit is not even bling on microsofts radar.
so who cares?
We only know because its here. If it wasnt posted here then we would'nt know about it, and still wouldn't care.