{"id":69,"date":"2007-02-14T10:46:31","date_gmt":"2007-02-14T15:46:31","guid":{"rendered":"http:\/\/www.pressleypress.com\/blog\/?p=69"},"modified":"2007-02-14T10:46:31","modified_gmt":"2007-02-14T15:46:31","slug":"microsoft-still-doesnt-get-security","status":"publish","type":"post","link":"https:\/\/www.pressleypress.com\/blog\/?p=69","title":{"rendered":"Microsoft – Still Doesn’t Get Security"},"content":{"rendered":"

From the ZDNet Article<\/a>:<\/p>\n

“Joanna Rutkowska has always been a big supporter of the Windows Vista security model. Until she stumbled upon a “very severe hole” in the design of UAC (User Account Control) and found out \u00e2\u20ac\u201d from Microsoft officials \u00e2\u20ac\u201d that the default no-admin setting isn’t even a security mechanism anymore…”<\/p>\n

“[When] you try to run such a program, you get a UAC prompt and you have only two choices: either to agree to run this application as administrator or to disallow running it at all. That means that if you downloaded some freeware Tetris game, you will have to run its installer as administrator, giving it not only full access to all your file system and registry, but also allowing it to load kernel drivers! Why should a Tetris installer be allowed to load kernel drivers?”<\/p>\n

This is the dumbest thing I’ve ever heard. Especially since Microsoft has had 3 operating systems with this dumb security model. There is no reason that Windows should require administrator access to install an application. This is one of the main issues involved with the security of Windows operating systems. In the Linux and Mac world, you login to your machine as a user – not an administrator. That way no program you run or install has administrator rights to the system. If you need to do something as an Administrator on the machine, the machine prompts you for the administrator username and password, does the required task, and then reverts your rights back to “user” privileges. (This is basically the “sudo” function found in Unix\/Linux.) In Mac-land, for the most part, you don’t even need admin privileges to install an Application. You can just create an applications folder in your home directory and you’re good to go. This is why Unix based OSs will always be more secure than Windows. Until they change the very core of how Windows installs and runs applications you’ll always have to give applications rights you don’t really want them to have.<\/p>\n","protected":false},"excerpt":{"rendered":"

From the ZDNet Article: “Joanna Rutkowska has always been a big supporter of the Windows Vista security model. Until she stumbled upon a “very severe hole” in the design of UAC (User Account Control) and …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[3],"tags":[],"class_list":["post-69","post","type-post","status-publish","format-standard","hentry","category-computers"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p32FB4-17","jetpack-related-posts":[{"id":1280,"url":"https:\/\/www.pressleypress.com\/blog\/?p=1280","url_meta":{"origin":69,"position":0},"title":"Saitek X52 Pro Not Being Detected by Driver Installation Program (Windows 8 and 10)","author":"Matt","date":"March 11, 2016","format":false,"excerpt":"My X-52 has been a real pain in the butt in Windows 10. It's hit or miss if after a reboot the joystick is going to be detected by Windows. Attempting to re-run the driver installer doesn't help. I found the following tip at\u00a0the Windows Support site\u00a0and seems to do\u2026","rel":"","context":"In "Computers"","block_context":{"text":"Computers","link":"https:\/\/www.pressleypress.com\/blog\/?cat=3"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":768,"url":"https:\/\/www.pressleypress.com\/blog\/?p=768","url_meta":{"origin":69,"position":1},"title":"Display a list of files in package while in Installer","author":"Matt","date":"April 10, 2012","format":false,"excerpt":"MacOSXHints.com via Display a list of files in package while in Installer.","rel":"","context":"In "Computers"","block_context":{"text":"Computers","link":"https:\/\/www.pressleypress.com\/blog\/?cat=3"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":552,"url":"https:\/\/www.pressleypress.com\/blog\/?p=552","url_meta":{"origin":69,"position":2},"title":"Make a VM of a Real Machine Using Disk2vhd","author":"Matt","date":"March 4, 2010","format":false,"excerpt":"Ever wanted to clone a windows machine, and run it as a VM? Well, Disk2vhd is the answer. \"Disk2vhd is a utility that creates VHD (Virtual Hard Disk - Microsoft's Virtual Machine disk format) versions of physical disks for use in Microsoft Virtual PC or Microsoft Hyper-V virtual machines (VMs).\"\u2026","rel":"","context":"In "Computers"","block_context":{"text":"Computers","link":"https:\/\/www.pressleypress.com\/blog\/?cat=3"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1720,"url":"https:\/\/www.pressleypress.com\/blog\/?p=1720","url_meta":{"origin":69,"position":3},"title":"Enable Administrator Login in Windows 11","author":"Matt","date":"February 19, 2025","format":false,"excerpt":"Did you accidentally lock your administrator login by attempting the wrong password too many times? Do you need to re-enable the account, and reset the password? Try the following : Hold SHIFT and click the power icon on the lock screen. Continue holding SHIFT and click on \"Restart\". This will\u2026","rel":"","context":"In "Computers"","block_context":{"text":"Computers","link":"https:\/\/www.pressleypress.com\/blog\/?cat=3"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":110,"url":"https:\/\/www.pressleypress.com\/blog\/?p=110","url_meta":{"origin":69,"position":4},"title":"The PC is the Abusive Spouse of the Computer World","author":"Matt","date":"November 8, 2007","format":false,"excerpt":"There's a great article on salon.com explaining why, when looking at the big picture, Macs are actually cheaper than PCs. The writer, Farhad Manjoo talks about Mac resale value versus PC resale value, and how the up front additional cost of a Mac doesn't mean that it's more expensive to\u2026","rel":"","context":"In "Computers"","block_context":{"text":"Computers","link":"https:\/\/www.pressleypress.com\/blog\/?cat=3"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":392,"url":"https:\/\/www.pressleypress.com\/blog\/?p=392","url_meta":{"origin":69,"position":5},"title":"Microsoft to open “Microsoft Stores”","author":"Matt","date":"July 20, 2009","format":false,"excerpt":"Really? They've even stated that they plan to open many of them near existing Apple Stores. You might ask yourself, what would a Microsoft Store sell? Apple actually makes computers AND the OS. What will we find inside a Microsoft Store? I think Penny Arcade hit the nail on the\u2026","rel":"","context":"In "Computers"","block_context":{"text":"Computers","link":"https:\/\/www.pressleypress.com\/blog\/?cat=3"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/www.pressleypress.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/69","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.pressleypress.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.pressleypress.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.pressleypress.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.pressleypress.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=69"}],"version-history":[{"count":0,"href":"https:\/\/www.pressleypress.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/69\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.pressleypress.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=69"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.pressleypress.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=69"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.pressleypress.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=69"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}