How is the PawnIO driver supposedly safer than WinRing0? #3451
Replies: 3 comments 4 replies
-
|
It's safer because it doesn't have the same elevation exploit as WinRing0, and it is not an open-bar type of driver.
PawnIO already kind of do this, as it loads small modules with restricted surface. Great write-up on the subject here: LibreHardwareMonitor/LibreHardwareMonitor#984 (comment) |
Beta Was this translation helpful? Give feedback.
-
|
Thanks for the link. But I'm still not that comfortable with having the "full" PawnIO driver installed (which, to quote namazso, is "provided with even more powerful and dangerous natives than WinRing0 originally did" and the only safeguard is that only namazso has the keys). Here is a scenario:
Vs. having a driver, probably PawnIO based, but tailored specifically for Fan Control - that is hardwired to provide only the barest minimum needed to read/set fans/temps. |
Beta Was this translation helpful? Give feedback.
-
|
Have you looked into https://www.ocbase.com/news/oring-update-april-2025? |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
WinRing0 was flagged by Microsoft not because it is unsafe by itself but because it allows third-party applications unrestricted access to hardware.
PawnIO offers essentially the same functionality.
A genuinely safer alternative would be a 3rd driver that is somehow hardwired to restrict hardware access to ONLY fans/sensors, and NOT PawnIO.
Beta Was this translation helpful? Give feedback.
All reactions