Linked by Jordan Spencer Cunningham on Fri 14th Aug 2009 02:29 UTC
Thread beginning with comment 378464
To view parent comment, click here.
To read all comments associated with this story, please click here.
To view parent comment, click here.
To read all comments associated with this story, please click here.
The problem is you think that *this* is the worst bug ever found.
It may be the worst bug found so far.
You don't know what you don't know. There could be plenty more egregious ones out there, ones that can rival Windows ones.
And there could be plenty more egregious ones in Windows that haven’t been discovered aswell.
Well done for making a non-point.
You completely misunderstand UAC if you think that is the case.
Running apps with different privileges on the same desktop is risky on all major OSes. But it's actually less risky on Windows than on most other OSes thanks to the secure desktop consent prompt (much safer than the non-SAS password model used on most *nix OSes and OS X), UIPI, etc.
Still, on any OS, if you're super paranoid then you're best off using separate user accounts and avoiding sudo / UAC like mechanisms.







Member since:
2008-04-10
True, but now Linux fan boys like me can take a different tack: The Worst Bug Ever in Linux is patched. UAC still has a gaping intentional loophole so Microsoft can let Notepad.exe run as admin. When a security hole is found in Linux, it gets fixed. When one is found in Windows, Microsoft either clam up, blame the users, or issue a patch years late.