Skip to content

Comment on Named Pipes in .NET 6 with Tray Icon and Serviceparent

Comments

TCP server cannot assume the security context of the client, thus privilege elevation attack can easily happen.

More importantly in a lot of cases, you can ask the kernel for the client's SID as the server, and make decisions knowing that the client couldn't forge it.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.