Jump to content
The Inquirer-Home

Windows 7 exploit secured, say Voles

UAC to get Vista-like UAC access control
Friday, 6 February 2009, 13:50

SOON AFTER reports emerged of Windows 7's tweaked UAC being a bit of a security risk, Volish developers have done a complete 180 and promptly set in place a few new security measures.

Stuck between a rock and a bunch of angry beta-testers, Vole developers DeVaan and Sinofsky had fallen back on the feature-not-a-bug defence argument to justify the uncovered exploits. However, overnight, they quickly reverted to "we did it this way, and now we're doing it a different way as we intended it from the beginning" argument, and put in place Vista-like security on the 7's UAC.

According to their posting on the MSDN bog, the new-new UAC control panel will run on a higher integrity process, which requires elevation, and changing the UAC level will require confirmation.

Cutting a nuisance feature short, despite the solution sounding like it makes snese, there's no way in Hades that Microsoft will please everyone with this, so expect a flurry of comments from the Pro-UAC brigade...

The bog carries on to say these changes will be put into Windows 7 RC1 toot de sweet, which should be out by yesterday, if Microsoft keeps on this timetable.

We've also noted that no-one's made any UAC-a-Vole jokes yet. µ

Share this:

Comments
Something tells me

that there will be lots of moaning about this. again.

posted by : Tankist, 06 February 2009 Complain about this comment
UAC-a-Vole

LOL!!
Hilarious and genius wordplay!!

<3 the Inq

posted by : raskolnikov, 06 February 2009 Complain about this comment
Beta test working!

All this means is that the general release beta test is working. Its suprising the number of people who think a beta product sucks because it has a bugs... That also covers feature use, which was the issue in this case.

posted by : Mick, 06 February 2009 Complain about this comment
Still won't work

The very first thing I do when I install vista on my own machine is disable UAC, then disable notification about it!

I think the Linux guys got it right when they made it so that only a superuser could change system settings, and if a normal user tried to it asked for the superuser password. However, logged in as superuser it doesn't ask for a password as it believes the superuser knows what they are doing.

I wonder when MS will finally give in and steal that method too. This UAC "Are you sure?^3" feature is rediculous.

posted by : Kev, 06 February 2009 Complain about this comment
UAC-A-VOLE

No IAC-A-Pizza-pie!

someone had to...

posted by : GZ, 06 February 2009 Complain about this comment
NEW: Free Ad-Aware Anniversary Edition....

UAC is Good, as allows Machine to Clear Unwanted process from being near software preperation, gives time to establish new install. Completely NEW look to Ad aware came out recently, it is much quicker & deeper in scan, Still free. Just click on Update & takes 10 minutes to install. It has More Complex Scan Engines Now, Too. STeWie Drashek

posted by : PersonalSecurity, 07 February 2009 Complain about this comment
@Kev

The problem is that MS need to coerce all the developers of the large code-base that was migrated to XP via the Win-DOS path, to re-write their applications to work in standard user environment of NT, rather than the admin-mode compatibility demanded by programs assuming full control of the OS - as per the Win-DOS environment. Whilst ever these applications continue to exist, and people either need to run them as admin or in elevated privs, then the non-technical user needs to be made aware of the potential dangers it presents to them. Without doubt, people should be able to run their systems as standard users, but until Vista, even many standard Microsoft apps required admin privs for everyday tasks... so who can really blame 3rd party devs for being a bit slower to pick up the pace on this... and obviously, some older apps will never be fixed.

posted by : justin Time, 07 February 2009 Complain about this comment
Picking for the wrong reason

This "article" displays the effect of blind anti-volish "racism". It doesn't matter what they do or don't do, it's all wrong as far as TheInquisitor is concerned.

To me this just proves that they do listen, and they're not rigid (as opposed to TheInq's biased one-sided gurgitations towards the "vole"). The article writers here ought to make it a habit to ask themselves if they're making sense or if they're just stuffing their thumbs up their nostrils.

posted by : Scyphe, 07 February 2009 Complain about this comment
UAC?

UAC nothing yet.

posted by : dodo, 08 February 2009 Complain about this comment
Ridiculous! Microsoft!

Come on you make this operating system very cheap and cost us a lot of money. you will lose us.

posted by : Duskywolf, 09 February 2009 Complain about this comment
M$ Come on!

you should listen to us people. Not all about yourself or lose us. you lose money. that's your decision. sorry for you.

posted by : Duskywolf, 09 February 2009 Complain about this comment
Advertisement
Subscribe to the INQ Newsletter
Sign-up for the INQBot weekly newsletter
Click here to sign up Existing user
Advertisement
INQ Poll

Windows 7 impressions

How is windows 7 working out for you?