Linked by Thom Holwerda on Sat 31st Jan 2009 10:45 UTC
Privacy, Security, Encryption Yesterday, we reported on the security flaw in Windows 7's UAC slider dialog, and today, Microsoft has given a response to the situation, but it doesn't seem like the company intends to fix it. "This is not a vulnerability. The intent of the default configuration of UAC is that users don't get prompted when making changes to Windows settings. This includes changing the UAC prompting level." I hope this reply came from a marketing drone, because if they intend on keeping this behaviour as-is in Windows 7 RTM, they're going to face a serious shitstorm - and rightfully so. Let's hope the Sinfoskies and Larson-Greens at Microsoft rectify this situation as soon as possible.
Thread beginning with comment 346383
To view parent comment, click here.
To read all comments associated with this story, please click here.
perspectoff
Member since:
2008-11-06

Throw your Ubuntu laptop in the bathwater and it has the risk of short-circuiting!

Don't be an idiot. You have to intentionally destroy your computer with these steps to destroy your computer.

Reply Parent Score: 1

DigitalAxis Member since:
2005-08-28

Not to mention, give it your password...

Reply Parent Score: 2

sakeniwefu Member since:
2008-02-26

It doesn't ask for further confirmation.
The(unneeded) sudo in chmod makes it so that all commands are trusted for a few minutes. If you followed my instructions no password is asked. If you didn't follow them but had just used sudo, no password is asked.
The bottom line is: do not run scripts.

Reply Parent Score: 3

libray Member since:
2005-08-27

Thats the point he is making. The problem with malware is that the user does not know what it will run in the background once they allow it to run given the *first* prompt.

Reply Parent Score: 2