#confused-deputy

A Mitigation That Became a Primitive: The Story of SeImpersonatePrivilege

Jun 1, 2026

How a 2003 backward-compatibility privilege became the most-abused Windows service primitive, and why every Microsoft closure path breaks something shipped.