Hacker News new | ask | show | jobs
by drzaiusapelord 4256 days ago
Except MS has implemented software-based permission groups, which the person you're replying to pointed out. This really low level x86 stuff doesn't mean you can't have more granularity.

Windows has system, high, medium, low, and untrusted security levels that get mapped to security groups. A local admin is high, but not system, etc.
1 comments
Someone1234 4256 days ago
Indeed, but it isn't a "ring." A protection ring has a specific meaning and that meaning IS about "low level [CPU] stuff." For example the CPU can be made to support more than two rings, Windows NT and UNIX just only utilise two of them and then build software protections on top (OS/2 supported 3).

https://en.wikipedia.org/wiki/Protection_ring

link