Linked by Thom Holwerda on Sat 9th Sep 2006 17:15 UTC, submitted by danwarne
Windows One of Vista's big security features is 'User Account Protection' (or 'User Account Control') which pops up and asks for user authentication before software can make any administrative changes to the system. But the TweakVista utility can turn off UAP in one click. Microsoft says this is UAP working as intended, because when a user runs TweakVista they are asked to authenticate. However, James Bannan at APC Magazine asked Microsoft what's to stop a downloaded 'freeware game' requiring user authentication upon installation and then disabling UAP altogether? Elsewhere, there's a tweaking guide for Vista RC1.
Permalink for comment 161031
To read all comments associated with this story, please click here.
This is no flaw
by PJBonoVox on Sun 10th Sep 2006 09:25 UTC
PJBonoVox
Member since:
2006-08-14

On Linux, what is stopping an application asking you for the root password and then using that information to do something as root?

No different/

Reply Score: 3