Hector Martin

And yes, on my Win10 1703 install, "C:\User\Default\AppData\Roaming\Microsoft\Start Menu" is writable by all users. Lovely.

Thoughts @NerdPyle

Patient: "It hurts when I do this" Doctor: "Don't do that" :) build reference machine, ICACLS default perms, substitute those perms

really though: open an MS Support case, get hands on help. When drowning, don't exchange your brick for a boat anchor

Read the blog post; the author went through the proper support channels and MS decided not to fix this vulnerability until 2018.

The problem is that *all* Win10 systems that went through the botched release are vulnerable w/o a manual fix. That's bad. Really bad.

It's not something the author broke on his system. It's something MS broke on everyone's system. The fix is trivial but there's no advisory.

https://twitter.com/nerdpyle/status/892117431312719872 …