Re: XP: Your Very own Low-Rights IE

Author	All Replies
redxii too big to fail Premium,Mod join:2001-02-26 Texas Host: /dev/null Broadband Tweaks Suddenlink ISDN Fiber Optic	reply to Tuulilapsi Re: XP: Your Very own Low-Rights IE said by Tuulilapsi : and MS has improvements to make So do software vendors, that is, constant writing to the registry should be done in HKEY_CURRENT_USER and the current user's Application Data folder instead of the program's folder. So it seems Vista will ask for a password if a program requires more privileges to write somewhere. I fear this only encourages other vendors to continue this vile behavior even if MS recommends it to them as only a solution for legacy or poorly written apps. -- Microsoft Windows 2000/XP Security: Some Assembly Required.
	to forum · permalink · · 2005-09-29 12:43:14 ·
Tuulilapsi Kenosis join:2002-07-29 Finland	Agreed - software vendors, in particular security software vendors - should both advocate the concept of least privilege and write their programs to work properly with non-admin accounts. What I would like to see is MS getting really rough on anyone who churns out code that breaks with non-admin accounts. If you remember those lovely "This driver has not been certified for XP compatibility" warnings, perhaps something like that would be in order: "Warning: This software is not compatible with (fancy term like 'Windows Protected User Accounts' here). This software is poorly coded and may jeopardize the security of your system, and your socks. Do you still wish to proceed with the installation?" If anyone could get away with doing that, it's MS. What are vendors going to do? Start writing all their apps for other operating systems, as if the majority used them? It would work. -- And lead me not into temptation - for I can find my way there myself easily enough.
Tuulilapsi Kenosis join:2002-07-29 Finland	to forum · permalink · · 2005-09-29 13:08:58 ·


Monday, 23-Nov 12:40:02	Terms of Use \| Privacy Policy \| Hosting by www.nac.net - DSL,Hosting & Co-lo \| feedback \| contact over 10 years online! © 1999-2009 dslreports.com.republican-creole page compression OFF