undefined | Better HN

0 pointsNateyJay8y ago0 comments

I think kernel mode drivers have more stringent signing requirements than user mode drivers. A user-installed CA definitely cannot be used to silently install a kernel mode driver.

0 comments

4 comments · 2 top-level

throwaway6138348y ago· 2 in thread

Oh. When you say driver do you mean user-mode? I always assume kernel mode (in every OS). But if so that would make sense!

lultimouomo8y ago

You need to install a user mode drive to leverage already existing kernel code with your device.

I assume this is what ADB does, using the Microsoft provided WinUSB kernel mode driver and associating it with your mobile phone USB vendor and product ID. There's not a single line of code in such a driver, just some INF descriptors.

There might also be different forms of user mode driver, not sure how they work.

throwaway6138348y ago

> You need to install a user mode drive to leverage already existing kernel code with your device.

You mean a user-mode application? A user-mode driver is something you write instead of a kernel-mode driver (when it's possible), not on top of it. (?)

1 more reply

GordonS8y ago

Yes, I think they also have to be counter signed by Microsoft.

j / k navigate · click thread line to collapse