Little-known hotkey vulnerability in Windows XP

Tip: Two concepts

1. Hotkeys

Hotkeys are used to start a program or use a program. One key and one set of keys of a function, one key can include F1, F2 function keys, or some special keys, such as "internet" on the DELL keyboard, "

mail", etc. The keys that are not on the keyboard, the most common ones are some combination keys. The hotkey that people who use QQ is most familiar with is the “ctrl+~” key combination, which is used to quickly view the sent information. There are also many hotkeys that can be used to open programs. These hotkeys can be set up by themselves. After setting, they can be used to open various programs. You can determine the rules for each program's settings, so that you can effectively use the hotkey function. For example, according to the first letter of the program, after setting, you can easily open the notebook with "ctrl+Alt+N" and open the word with "ctrl+Alt+W". For those who are particularly dependent on a tool, this is the case. The way to open the program is very convenient, so it is widely used.

2, winxp "self-deregistration" function

When we are in the office, we often need to leave temporarily, and put the computer on the desk, which means that the information is peeked or Lost even more serious consequences, so with a screen saver, if you set a password, then in general, others will not be able to move your computer. This ensures security.

In winxp, it provides a feature that we call "self-logout" (that is, automatic logout). This feature is similar to the screen saver, and it has been on your computer for a while. It automatically logs out after the quiescent state, but this "logout" is a fake logout, all your background programs are still running, there is almost no difference before the logout, which leaves a hidden danger.

Vulnerability Description

The hotkey function is a service provided by the system (specifically, open the program, use the program's hotkey), and the service has not been executed during the startup process until the login interface. This feature is only enabled when you log in as a user. After execution, the user can use the hotkeys of the user's own settings (including some default hotkeys).

Suppose a user (he has the administrator's identity and logs in as an administrator) has something to leave for a while, and thought he would come back soon, but he was forced to get back soon, and his computer was Exposed to the case of no protection, then winxp (the operating system of the computer mentioned here refers to winxp, and the operating system does not set the screen saver and the corresponding password) is very smart to automatically implement the "self Logout." If this kind of cancellation is really written off, then this security measure is obviously very good, but as mentioned before, this kind of cancellation is fake, although others can not enter your desktop, can not see your computer What's in the room, but they can also use the hotkey because the hotkey service has not stopped.

At this time, a hostile and experienced person can use these hot keys to do something. The easiest way is to open N big programs to destroy your machine, you can open and use a program. In particular, some sensitive programs (and services) related to the network...

In fact, this computer is half controlled by him, as long as he has enough imagination...

Security measures < Br>

In fact, we have to admit that the above vulnerability is being used to make really destructive things. The probability is very small. It requires a lot of "hypothesis", but as a loophole, it is Really exist, not afraid of 10,000, just in case, just like "CDautorun", as far as we know, it has not been used to cause damage, but the possibility of this breach of security is really there. So in many public places (such as Internet cafes), this feature is turned off.