Linked by Thom Holwerda on Sat 31st Jan 2009 10:45 UTC
Privacy, Security, Encryption Yesterday, we reported on the security flaw in Windows 7's UAC slider dialog, and today, Microsoft has given a response to the situation, but it doesn't seem like the company intends to fix it. "This is not a vulnerability. The intent of the default configuration of UAC is that users don't get prompted when making changes to Windows settings. This includes changing the UAC prompting level." I hope this reply came from a marketing drone, because if they intend on keeping this behaviour as-is in Windows 7 RTM, they're going to face a serious shitstorm - and rightfully so. Let's hope the Sinfoskies and Larson-Greens at Microsoft rectify this situation as soon as possible.
Permalink for comment 346446
To read all comments associated with this story, please click here.
license_2_blather
Member since:
2006-02-05

I haven't used Vista all that much. I have a problem in principle with a version of Windows that is a minor enhancement at most for me (vis-a-vis XP) taking twice or more the resources. But when I've used it, I haven't found UAC all that annoying. The only time I didn't like it was when performing file operations in Windows Explorer that required privileged access. Explorer prompts once, then UAC prompts again. It's a drag if you are creating directories under C:\ or C:\Program Files. But overall UAC wasn't much worse than sudo on *nix to me.

The goal, as clearly stated by Microsoft, was to annoy users so much, that they started demanding that 3rd party developers fix their apps so they don't need admin priveleges anymore.


Wow, if that be the case, that's rich. They don't have enough cojones as a multi-billion-dollar company to apply the pressure on their ISVs themselves? Besides, sometimes those 3rd-party apps are felt to be indispensable, or the vendors don't listen--sort of like with, um, oh yeah, Windows and Office. [I would not often use the term "alacrity" to describe the pace at which Microsoft has addressed user complaints.]

All that said, I'm running non-admin on XP, when I do run XP. With a few tweaks (mostly to allow me to adjust wireless settings, since wireless on XP still sucks), it isn't all that bad, either.

Reply Parent Score: 1