[soggypretzels]

Can someone explain why this is not just something that Microsoft should patch in windows? i.e how is this not just a windows vulnerability that you can use TrueCrypt to take advantage of? Why are drivers able to escalate privilege at all?

[TillE]

A driver is kernel-mode code that's written in C. It can do just about anything, and when there's a bug, you're in trouble.

I'd like to see Microsoft allow more drivers to run in user-mode, but this is just the risk you take when installing drivers. Microsoft has been tightening driver signing requirements, so you can at least be sure they're from a known source.

[wglb]

Drivers often run at kernel level.