Is UAC really secure?

MadMaxData · 13 May 2010

johngalt said:

Wrong. My method is a simple paste of a link. There is no adding URL tags, typing the words "click me" or "Who's your Daddy" or anything like that. If you cannot understand that, then this conversation is over.

I understand that perfectly well, but the reasoning you gave for your method was...

johngalt said:

BTW, for future reference - don't change the text of a link to "Click Me" - it is exactly that sort of behavior that we try to get novice users to avoid when they are online, without first verifying the link.

Your method does nothing to verify a link. Which is why I found it rediculous. And your right, this conversation IS over.

manhunter2826 · 13 May 2010

MadMaxData said:

I'm seriously considering dropping the UAC settings on my primary rig. Why? There's no real reason to keep it. It only provides a false sense of security. Check out this artice: CLICK ME

Down to you I suppose but I'm keeping mine ON:
Windows UAC question

pezzonovante · 13 May 2010

The best method is to set the UAC slider to the max, so that it's running in Vista Mode.

pparks1 · 13 May 2010

Let's try to get this back on topic.

MadMaxData said:

Umm, actually I did understand the article, and your point. Wow, I can't believe you just said such a thing. You don't have any third party software on your machine that silently elevates without a UAC prompt?

I'm not aware of 3rd party software on my machine with silently escalates without prompting.

Care to share with me which software packages you have that you are certain do this?

I'm assuming that you are concerned primarily due to articles like this one;
http://www.istartedsomething.com/200...-self-elevate/

It seems most of these articles were all from Feb to May of 2009....and i believe that the issues brought up in those articles have been addressed.

severedsolo · 13 May 2010

that would be difficult the OP is banned

pparks1 · 13 May 2010

severedsolo said:

that would be difficult the OP is banned

Wow, didn't even catch that.

Well, as far as I know, I still believe that I am correct in that 3rd parties cannot silently auto elevate themselves.

This is not to say that I believe that UAC is the be-all-end-all for system security...it's just another layer. But one that I actually feel provides some benefits for most people and I don't usually recommend disabling it.

severedsolo · 13 May 2010

pparks1 said:

severedsolo said:

that would be difficult the OP is banned

Wow, didn't even catch that.

Well, as far as I know, I still believe that I am correct in that 3rd parties cannot silently auto elevate themselves.

This is not to say that I believe that UAC is the be-all-end-all for system security...it's just another layer. But one that I actually feel provides some benefits for most people and I don't usually recommend disabling it.

agreed, completely, sure its not perfect, but to be honest, id rather have it than not. I am glad they have toned it down a little bit though, it sure was annoying sometimes being asked 3 times if you wanted to do something

Lordbob75 · 13 May 2010

The amusing part is that he completely ignored the third post, saying that MS patched it before release.

~Lordbob

zzz2496 · 13 May 2010

Yeah... I feel so sad right now, being ignored like that

zzz2496

Lordbob75 · 13 May 2010

zzz2496 said:

Yeah... I feel so sad right now, being ignored like that

zzz2496

Don't worry, I read it.

~Lordbob