
Yesterday, we reported on the security flaw in Windows 7's UAC slider dialog, and today,
Microsoft has given a response to the situation, but it doesn't seem like the company intends to fix it.
"This is not a vulnerability. The intent of the default configuration of UAC is that users don't get prompted when making changes to Windows settings. This includes changing the UAC prompting level." I hope this reply came from a marketing drone, because if they intend on keeping this behaviour as-is in Windows 7 RTM, they're going to face a serious shitstorm - and rightfully so. Let's hope the Sinfoskies and Larson-Greens at Microsoft rectify this situation as soon as possible.
Member since:
2005-11-13
I think you're missing the point here. If I understand it correctly, the exploit will be able to turn off UAC without UAC ever prompting the user that it is being turned off. So the user will never get the origial prompt that the program/script they just ran is attempting to do something fishy.