Win7 built-in security flaw?

Old news. It's not really a flaw in that its actually doing EXACTLY what it was meant to do. Obviously the nag screens in UAC didn't go over well and now because you don't get one its a security flaw, but wait only on UAC changes and then oh wait something else. I'm sure MS thought long and hard over this and said fuck it, we'll just do it this way by default and if you don't like it then change the setting.
 
If UAC pops up when you change a system setting and you decide you don't like that you can change it. However changing UAC is a system setting. So with it lowered or disabled you won't be notified when the UAC setting is changed.
So malware could change it on it's own should have it set low enough.

People complained UAC was annoying. So microsoft changes it so you can decide the level of security you want. And now people are going to complain about that.

Just leave it on.

From the article:
Microsoft responded to the publication of this security flaw stating that in order for this vulnerability to be exploited, a user's computer would have to contain malicious code already, which means other security software has failed to prevent this or the user has explicitly allowed it.
 
You know Microsoft should FORCE the creation of a standard user account so that this stuff isn't an issue any more but I wonder how many people that would freak out.

Bottom line, for day to day operations, run as a standard user and this shit disappears.
 
Back
Top