Javier Bezos wrote:
>
>
> "Jack the Ripper" <> escribió en el mensaje de
> noticias:...
>
>>> Another one of these I am so good that I must run on the Internet as
>>> user/admin with no protection, wide-open to attack. Little did he
>>> know that malware slipped by him in the past, slipped right past the
>>> security blanket, and he didn't even know it.
>
> UAC it's useless --too simple for advanced users, too complicated
> for average users, too annoying for all. Security cannot rel on
> the user decisions, particularly when he is asked systematically
> for everything (which means after a couple of months he will
> accept or reject systematically everything, ie, UAC becomes
> just useless noise). The only real problem is IE, but the
> solution for this flaw is easy.
>
I am an advanced user starting with Win NT 3.5 to Vista. The problem is
that you don't know the protection that UAC is providing the user who
must run on the Internet with admin rights. With UAC enabled, the
user/admin has two access tokens assigned. One token is for full admin
rights, and the other one is for Standard user rights, the default.
When full admin rights are needed, then the user/admin privileges are
escalated to use the full/admin token at the moment of escalation for
the task, and then the admin/user is returned to using the Standard user
token. Therefore user/admin is 99% of the time a Standard user.
I am not going to run on the Internet with full admin rights, because of
the possibility of attack that the previous versions of the NT based
O/S(s) could never deal with.
It's not bullet proof nothing is bullet proof, but I a not going to have
a loaded gun pointed at my foot while I surf the Internet.
http://technet.microsoft.com/en-us/l.../cc709691.aspx
When an administrator logs on to a computer running Windows Vista, the
user is assigned two separate access tokens. Access tokens, which
contain a user's group membership and authorization and access control
data, are used by Windows® to control what resources and tasks the user
can access. Before Windows Vista, an administrator account received only
one access token, which included data to grant the user access to all
Windows resources. This access control model did not include any
failsafe checks to ensure that users truly wanted to perform a task that
required their administrative access token. As a result, malicious
software could install on users' computers without notifying the users.
(This is sometimes referred to as "silent" installation.)