Ron Schenone

Vista – New Security – Safer Computing

Posted by on Feb 22, 2007 | 4 Comments

One of the major problems associated with Windows XP was the fact that we had total administrative privileges over our systems, which meant we could install software, change settings and make modifications. This was great until the bad guys learned to exploit this feature. I remember the first call I got about malware advertisements popping up on a user system, even when they were not physically connected to the net. At first I thought the user was a loon, until I saw it for myself. This was before we really knew how to deal with this junk.

Anyway, back to Vista. Vista comes with what is called UAC – User Access Control. And it is a two edge sword, IMHO. Everything you do that may make a change to the system, must be authorized by the user. Change a display setting, up pops an alert, asking if you really want to do this. Somewhat annoying at first. However, in theory if a unwanted program goes to make a change on the system you the user can say No, which will kill the process. 100% effective.

I THINK NOT!

Two reasons:

First is that the system still must rely on user intervention. Some folks will not understand the question when it is presented to them. Microsoft assumes that after 20 plus years of computing, that ever user is now a expert. Unfortunately this is not the case. There are some using computers for the first time that still may answer Yes when they should answer No.

Second, Microsoft allows this feature to be turned off. Now, if a user is able to turn this feature off, what would make one to not think that a smart hacker wouldn’t be able to do the same thing? Some ‘bugs’ are designed to render anti-virus programs useless. So in my opinion, it will only be a matter of time before this feature could be exploited as well.

And I myself, was going to turn it off, thinking I was smart enough to keep my system protected without a annoying nag screen telling me what to do. But I thought better of the idea for one simple reason. Sometimes we all are in a hurray to complete a computer task and may not take into account the repercussions of our actions.

Time will tell how UAC plays out for all of us.

What do you think? Comments welcome.

[tags]vista, microsoft, software, settings, modifications, uac, [/tags]

  • http://web2sociology.com/blog Russell Cole

    I think you are right in your assessment of Vista and its security features as an innovation that is not only less than groundbreaking but certainly not a solution to security problems in their totality. Although, I hope, most users are not inept to the point that they are stupid enough to ignore the dialogue box that appears prior to the installation of malware that is unwittingly downloaded from suspicious sites, the decision can be a daunting one for even seasoned users who must constantly elect whether the active x control required to view sites is a legitimate addon even if it is not signed by a trusted vendor or an instance of a trojan attempting to acquire kernal access. The solution is not so much in the provision of the rather annoying assortment of dialogue boxes giving security options, it would come from more extensive research into all of the software vendors out their to predetermine if a site can be trusted, which is an evaluation that should appear in the dialogue box that opens prior to a download.
    Russell Cole

  • http://wp3.lockergnome.com/nexus/blade/ Ron Schenone

    Hello Russell,

    I agree. I myself have installed drivers where UAC warned me it was unsigned and not to be trusted. I said OK – install it anyway. But I knew the site and needed the updated driver to get my wireless card working in Vista.

    Aunt Tilly isn’t going to have a clue. :-)

    Thank you very much for your comments.

    All the best, Ron

  • http://midwest-populistamerica.com Russell Cole

    you are right about the drivers. especially with the 64 bit where you are always searching to high waters for some beta or alpha out there somewhere that is compatible with the device you are trying to use, you never now what you are getting into. Microsoft would have been well served to have addressed these vexing problems prior to the release. as of right now there are several devices i cannot get identified and there are no prospects in any time soon for drivers to be developed for the 64 bit. time to actually care about your customers microsoft!
    russ

  • http://wp3.lockergnome.com/nexus/blade/ Ron Schenone

    Hi Russ,
    I agree. It does seems strange that so many people are still looking fo drivers after the release. It makes one think that in order to sell Vista, MS didn’t want us to know how many hardware products would not be supported.
    Regards, Ron