One of Vista's big security features is 'User Account Protection' (or 'User Account Control') which pops up and asks for user authentication before software can make any administrative changes to the system. But the TweakVista utility can turn off UAP in one click. Microsoft says this is UAP working as intended, because when a user runs TweakVista they are asked to authenticate. However, James Bannan at APC Magazine asked Microsoft what's to stop a downloaded 'freeware game' requiring user authentication upon installation and then disabling UAP altogether? Elsewhere, there's a tweaking guide for Vista RC1.
To view parent comment, click here.
To read all comments associated with this story, please click here.
Member since:2005-11-27
Member since:2005-07-06
Member since:2005-07-06
Member since:2005-07-06
Member since:2005-11-27
Member since:2006-06-28
Member since:2005-07-06
Install shared plugins? There is any of a number of reasons an app might need to modify system files.
You can never trust any application.What if a rogue program exploits a vulnerability in UAP since almost any piece of software has holes.It's way better to have an extra (MAC) barrier a la SELinux AppArmor instead of the common DAC (file permissions).
There is any of a number of reasons an app might need to modify system files.
Some files just don't have to be accessed or in very rare circumstances.An installer normally doesn't need to add users exept with special permissions.
The prime is you don't grant users permissions but software.In this case admin privileges.Which is something to not take with a grain of salt in my humble opinion.
Member since:
2005-07-06
What about when you run a configuration application? Like a preferences tool? What about when an application needs to set up file associations? Install shared plugins? There is any of a number of reasons an app might need to modify system files.