Other updates

ALT: a close up of a man 's face with sweat on his shirt

Jan Kanthak stwierdził, że w związku z aferą działki pod CPK "państwo nie reagowało, mając świadomość, że jest okres 5 lat, aby tę ziemię odkupić". — Czy to

W niedzielę w Warszawie Tobiasz Bocheński, Mateusz Kurzejewski i Jan Kanthak ogłosili, że udadzą się do Centrum Nauki Kopernik, gdzie trwa druga część

Posted by Stefan Kanthak via Fulldisclosure on Oct 07On a fresh installation of the just released Windows 11 25H2 the former file %SystemRoot%\System32\SecurityHealth\10.0.27840.1000-0\SecurityHealthHost.exe is %SystemRoot%\System32\SecurityHealthHost.exe now, but the BUG persists: | svchost.exe (PID = 9876) identified \\?\C:\Windows\System32\SecurityHealthHost.exe | as Disallowed using default rule, Guid = {11015445-d282-4f86-96a2-9e485f593302} stay tuned, and far away from bug-riddled Windows...

Posted by Stefan Kanthak via Fulldisclosure on Sep 22Hi @ll, since several years Microsoft installs the DLLs domain_actions.dll and well_known_domains.dll as part of their Edge browser as well as Windows' WebView component into each and every user profile, UNPROTECTED against tampering. On Windows 11 24H2 their paths are currently "%LOCALAPPDATA%\Microsoft\Edge\User Data\Domain Actions\3.0.0.16\domain_actions.dll" "%LOCALAPPDATA%\Microsoft\Edge\User Data\Domain...

Posted by Stefan Kanthak via Fulldisclosure on Sep 22Hi @ll, since several years Microsoft installs the DLLs domain_actions.dll and well_known_domains.dll as part of their Edge browser as well as Windows' WebView component into each and every user profile, UNPROTECTED against tampering. On Windows 11 24H2 their paths are currently "%LOCALAPPDATA%\Microsoft\Edge\User Data\Domain Actions\3.0.0.16\domain_actions.dll" "%LOCALAPPDATA%\Microsoft\Edge\User Data\Domain...

Posted by Stefan Kanthak via Fulldisclosure on Sep 22Hi @ll, more than 2.5 years ago I posted "Defense in depth -- the Microsoft way (part 82): INVALID/BOGUS AppLocker rules disable SAFER on Windows 11 22H2" <https://seclists.org/fulldisclosure/2023/Feb/13> In "SRP on Windows 11" <https://seclists.org/fulldisclosure/2023/Mar/1> Andy Ful presented a persistent correction some days later. Since several months now (unfortunately I can't tell the exact time)...

Posted by Stefan Kanthak via Fulldisclosure on Sep 08Hi @ll, this extends the two previous posts titled Defense in depth -- the Microsoft way (part 90): "Digital Signature" property sheet missing without "Read Extended Attributes" access permission <https://seclists.org/fulldisclosure/2025/Jul/39> and Defense in depth -- the Microsoft way (part 91): yet another 30 year old bug of the "Properties" shell extension <https://seclists.org/fulldisclosure/2025/Aug/2...

Posted by Stefan Kanthak via Fulldisclosure on Aug 04Hi @ll, this extends the previous post titled Defense in depth -- the Microsoft way (part 90): "Digital Signature" property sheet missing without "Read Extended Attributes" access permission <https://seclists.org/fulldisclosure/2025/Jul/39>, to document another facette of this 30 year old bug in the "Properties" shell extension. About 35 years ago Microsoft began to implement their "New Technology File...

Posted by Stefan Kanthak via Fulldisclosure on Jul 29Hi @ll, about 35 years ago Microsoft began to implement their "New Technology File System" (NTFS) for their upcoming Windows NT operating system. NTFS supports the extended attributes of the HPFS file system which Microsoft and IBM had developed for their OS/2 operating system before. NTFS' initial version, released with Windows NT 3.1 in 1993, had no access control; this was added for Windows NT 3.5, released one year later, with...