I didn't really get the point being made there. Yes, windows kernel security posture is swiss cheese, but that's not an argument for poking more holes.

▲

Wowfunhappy 5 days ago | parent [-]

Well, if nothing else, it makes me think that if you are doing truly security-sensitive work, you almost certainly need to get a separate computer for that. Whether or not you play any games with kernel-level anti-cheat, you probably have cpu-z installed.

And if you're not doing something particularly sensitive, then security on consumer PCs must matter a lot less than some people think.

	▲	jeroenhd 5 days ago \| parent [-]
		> Whether or not you play any games with kernel-level anti-cheat, you probably have cpu-z installed. The problem with these is actually worse. Any program with the necessary permissions can load these drivers. Some malware likes to ship known-vulnerable drivers with one of their later stages to get kernel code execution, and Microsoft doesn't want to revoke the signatures of this malware because applications and hardware will stop working. You don't nee CPU-Z to be installed, you just need to run a program that decided to bundle the (old) CPU-Z driver.