/usr/sbin/userhelper / kbdrate local root exploit - works only at console. Works well for people you know.