Windows 8 Security Measures Broken?


Recommended Posts

Last week?s Windows 8 launch wasn?t just a major product release for Microsoft. It seems to have been a banner day for the government-funded hackers who take Microsoft?s software apart, too.

On Tuesday the French firm Vupen, whose researchers develop software hacking techniques and sell them to government agency customers, announced that it had already developed an exploit that could take over a Window 8 machine running Internet Explorer 10, in spite of the many significant security upgrades Microsoft built into the latest version of its operating system.

Source: Forbes

Really interesting read. It's also noted that it'll take other hackers a while before breaking into Windows 8 becomes more common.

Link to comment
https://www.neowin.net/forum/topic/1116295-windows-8-security-measures-broken/
Share on other sites

And this is why I will never buy an RT based tablet as long as the browser restrictions are in place. Even with Microsoft's security improvements IE still seems to be a portal for hackers.

  • Like 2

And this is why I will never buy an RT based tablet as long as the browser restrictions are in place. Even with Microsoft's security improvements IE still seems to be a portal for hackers.

And that and other reasons are why it is advised to avoid IE.

so this was with the desktop version of IE? no surprise there

now if this was with the Metro IE and they had managed to break RTs sandbox THEN I'd be impressed

Well, that depends. A lot of Metro apps use WWAHost for execution, which is an IE renderer. If the bug is in that, then they could potentially breach the sandbox for Metro apps.

And this is why I will never buy an RT based tablet as long as the browser restrictions are in place. Even with Microsoft's security improvements IE still seems to be a portal for hackers.

Actually, IE on Metro has a more restrictive sandbox than IE on desktop. I know you can enable the more secure sandboy in the "normal" desktop IE, but I don't know if you can do it in the ARM version.

But then what do you want to use? Firefox? I like Firefox, but it's nowhere near IE in terms of security.

Actually, IE on Metro has a more restrictive sandbox than IE on desktop. I know you can enable the more secure sandboy in the "normal" desktop IE, but I don't know if you can do it in the ARM version.

But then what do you want to use? Firefox? I like Firefox, but it's nowhere near IE in terms of security.

yeah doesn't IE actually have the strongest sandbox between firefox(which doesn't even have a sandbox) and chrome now?

And this is why I will never buy an RT based tablet as long as the browser restrictions are in place. Even with Microsoft's security improvements IE still seems to be a portal for hackers.

the more reason to not use IE :p

what makes you think Firefox, Chrome or Opera on Windows 8 will be any better? :/

what makes you think Firefox, Chrome or Opera on Windows 8 will be any better? :/

I think it's security wise better because of the way it's written and I'm always pro firefox since they're the only ones that keep themselves to the webstandards which is important to me as a webdesigner.

But yeah every software has/had its security holes except IE a few more :p

You mean hackers have done the possible?! :huh:

All the additional layers of security in Windows 8 and RT make hacking more difficult but not impossible. With enough determination, a hacker can break into any system. Even Google Chrome has been exploited, bypassing the sandbox and all.

This topic is now closed to further replies.
  • Posts

    • I don’t get why if I bought the game on the last get I needed to pay $40 to upgrade to the new version in the first place and people who love the game and play a lot would have upgraded already so this is just PR and a chance to grab new players who forgot the game long time ago I think
    • The term "use" is doing a lot of heavy lifting in that headline. "Use" can mean opening ChatGPT occasionally to ask for the definition of a word or information about a specific topic. If you frame the question around how many people use it as a daily driver in their work or personal lives, that number is a lot smaller. Those are the people who pay for AI. Nearly everyone else is happy to use it for free, but doesn't see enough value in it to pay for it.
    • No support for Windows Hello!
    • I think you meant the "ntfs3" driver, but yes there have been a lot of fixes for it in this release and previous releases, not 100% sure if the issue you mentioned is fixed though. In any case, the new "ntfs" driver in 7.1 doesn't have that issue (at least, no reports of such have come thru), but your kernel needs to explicitly enable support for the new driver first (like how CachyOS kernel has it), and you need to edit your mount points in /etc/fstab to use "ntfs" instead of the other drivers.
    • Epic Games says Unreal Engine 6 will help developers "build content faster" using AI models by Pulasthi Ariyasinghe Epic Games is rolling out the latest major update to Unreal Engine 5 today, and at the same time, the company also dropped some information on the next-generation version of the product, Unreal Engine 6. This was already revealed a few weeks ago alongside the new Rocket League upgrade reveal. The company says it is combining the features of Unreal Engine and Unreal Editor for Fortnite to create this new version of its popular media creation tool. On top of creating entire games, the new engine will also focus on letting developers operate large-scale live service titles more easily, whether by shipping content into their own ecosystems or into Fortnite. The use of large language models is also mentioned here, with Epic saying it will be a core part of the engine. "We see LLMs, generative AI models, and tools like Claude and Codex playing a central role in helping you build content faster while maintaining the creative control you need," adds the company. Here is the rundown of what's new about version 6 of Unreal Engine: With all these changes to the programming model, portability upgrades, and generative AI integration, Epic says the new version of the engine will "change a lot about how games are made." The company aims to ship Unreal Engine 6 into early access in late 2027, with a full release planned for 12-18 months later. Epic Games also dropped a lengthy blog post about the new Unreal Engine 5.8 update for game developers over here. The release is focused on delivering better performance, customization, and streamlined workflows for development teams. This will be the final major update for this version of the engine before Epic switches to focus fully on Unreal Engine 6's early access launch.
  • Recent Achievements

    • One Month Later
      Vincian earned a badge
      One Month Later
    • First Post
      Jocimo earned a badge
      First Post
    • Week One Done
      suprememobiles48 earned a badge
      Week One Done
    • One Month Later
      Windows Guy earned a badge
      One Month Later
    • One Month Later
      Prasann earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      502
    2. 2
      +Edouard
      162
    3. 3
      PsYcHoKiLLa
      86
    4. 4
      Steven P.
      67
    5. 5
      neufuse
      65
  • Tell a friend

    Love Neowin? Tell a friend!