undefined | Better HN

0 pointspetersellers11mo ago0 comments

Limits the blast radius to only the files that the more limited user has write access to.

0 comments

azov11mo ago

The files I normally have write access to are my important files though.

Immutable snapshots/offline backups help with those.

It's more important in a corporate setting. Lateral movement inside the network is much more likely if the attacker has local admin.

Why would local admin have relevance to network movement?

amy21410mo ago

on the flipside i feel like privilege escalations are a dime a dozen

j / k navigate · click thread line to collapse