Windows 7 UAC has a second flaw

[pooch]

Long Zheng of I Started Something has uncovered a flaw in Windows 7's UAC that means malware can elevate itself to administrator privileges. This news comes after a previously discovered flaw in Windows 7's new tiered UAC system that meant malware can disable UAC silently.

More;Windows 7 UAC has a second flaw

 

[garysgold]

Good article. Thanks pooch.

I already have UAC set to always notify. More clicks, but that's the price of security at this point. If I'm going to be playing and getting lots of prompts, I close my net connection and turn it down. Not having to reboot is a plus.

Gary

 

[Barman58]

Thanks Pooch

If you parked your car in a known dubious area and then left the doors unlocked so it would be easier to get in when you returned, no one would be surprised if the car was not there when you returned.

Why then is there all this worry over UAC when it has been purposely set to a less safe status.

Any security is only effective when it is switched on, If a user decides to lower security then that is their right but there is a price to pay for this decision.

Saying this I would prefer to see the OOB defaults for the UAC set to FULL, As in Vista, as this would better protect a lot of users who to be honest when using Vista just got on with it and accepted the prompts as part of the system.

 

[Joan Archer]

I agree with you there Nigel, I'm not one of the tech types who are always messing with system settings, trying out new stuff etc: so I have no problems with UAC, in fact I think it was a good move on Microsoft's part to make it part of the OS, after all it's just another layer of security to make our systems safe to use.

The baddies out there are getting more sophisticated in trying to infect our machines so having something built into the OS that tries to help keep them out has got to be a good thing, after all it's only a click that's needed to allow us to carry on when we've been alerted to the danger or otherwise of what we are about to do.

Whoops didn't know I'd waffled on so much sorry.