Hacker publicly cracks Windows Vista

  Apparently Microsoft were left red faced after live hacking demonstration, well I can't ubderstand why, surely they know no matter how hard they try to make thing impregnable, there will always be away round it. Isn't this because we are human and humans design these things. Rather than go away red faced they stand and applaud ( and maybe offer this guy a job).

A security researcher at the Black Hat security conference has demonstrated several ways to circumvent security features that are built into Microsoft's forthcoming Windows Vista operating system.

According to media reports, researcher Joanna Rutkowska with Coseinc demonstrated two ways to attack a Windows Vista system during a session at the conference. The exposed flaws would potentially allow an attacker to execute arbitrary code.Windows Vista requires that all device drivers are 'signed' to prevent malicious code from posing as a legitimate driver.

The researcher however demonstrated a way to load unsigned drivers. The researcher in the second case used the virtualisation technology in a system's AMD processor to inject code into the Vista kernel.

The technology would allow an attacker to create a new hypervisor that could control the operating sytem. It would remain undetected from the user and would be at the attacker's disposal.Although she only demonstrated the attack on an AMD processor, Rutkowska said that it would also work on PCs running Intel chips.

Both attacks relied on documented features in Windows Vista and should not be considered bugs, she added."The fact that this mechanism was bypassed doesn't mean Vista is insecure.

It just means it's just not as secure as advertised," said Rutkowska,

according to Internet News.  

Earlier at the annual Las Vegas security event, Microsoft had challenged hackers to test the operating system's security features. It has distributed copies of the software's latest beta to about 3,000 security researchers.Rutkowska is not the first security researcher to hack into a Windows Vista system, but is the first do so in a live demonstration at a public event.