Linked by Thom Holwerda on Mon 22nd Jun 2009 22:31 UTC
Windows Here at OSNews I have hammered and hammered on a few times already about the major flaw in Windows 7's default User Account Control, which allows people or software with malicious intent to completely bypass UAC in such an easy manner that you wonder why UAC is there in the first place. Well, the source code to this flaw has been released - since Microsoft has made it clear they have no interest in fixing it anyway - and Long Zheng, fellow advocate of fixing this bug, made a very clear demonstration video.
Permalink for comment 369860
To read all comments associated with this story, please click here.
axilmar
Member since:
2006-03-20

Instead of using a list of signed folders and files, Microsoft should introduce virtualization of the whole filesystem per user. Then there would be no need for signed objects' lists.