user253751 – WindowsTechs.com

Is there an established way to classify network services by risk level?

Posted on March 6, 2024 by user253751

I noticed that I seem to think of network services in three categories wrt the risk of exposing one to the internet (or a hostile network):

"Low risk" services are extensively hardened. If a bad guy gets access to one, nothing h… Continue reading Is there an established way to classify network services by risk level?→

How to prevent a user retaining file access with an open handle on Windows?

Posted on August 11, 2022 by user253751

Suppose a user is a member of a group, and they open (in the Windows API sense) a file whose DACL grants access to that group.
Then, the user stops being a member of the group.
Since access checks are performed at the time of opening the f… Continue reading How to prevent a user retaining file access with an open handle on Windows?→