⬇ Download holy card: ·
Saint HiveNightmare, Who Let Everyone Read the Registry
Patron of Windows system registry hives, over-broad permissions, and forgotten shadow copies.
Life
In July 2021 came HiveNightmare, also called SeriousSAM (CVE-2021-36934): on certain versions of Windows 10 and 11 the registry hive files, SAM included, had permissions so broad that even an ordinary user could read them. Through the volume shadow copies you reached the account password hashes, escalating all the way to SYSTEM. A nightmare born of a single mis-set permission box.
Prayer
O Saint HiveNightmare, who lets everyone read the heart of the system, teach Windows to guard its most jealous hives. Amen.
How to celebrate
Celebrated by applying the patch, fixing the registry file permissions and deleting the compromised shadow copies.
A registry open to all, passwords for all.