May 7, 2009

Windows 7 RC's UAC is still vulnerable to the old security flaw

Windows 7 RC's UAC is still vulnerable to the old security flaw discovered in the beta.

The morons complained about Vista's UAC, Microsoft listened to these morons and now these morons will have Windows 7 which is less safer than Vista.

Quick Windows 7 RC1 Update:

Everything below still applies to the RC1 build 7100. The proof-of-concept code still works as-is. Nothing has been done to address any of this. Microsoft apps like Explorer.exe, Calc.exe and MSPaint.exe are still "blessed" with something apparently too dangerous to give third-party developers yet not dangerous enough to stop malicious software from abusing. MS still haven't responded to repeated offers to give them full details. As all of this is apparently a non-issue I'm considering putting the proof-of-concept exe/source online, but not sure yet if that's the best thing to do. I still haven't fixed all the typos on this paged or trimmed it down as I've been coding instead (plus there were those two weeks where I did nothing but play Resident Evil 5 on my 360). :) --Leo 03/May/2009

View Source: Windows 7 UAC

No comments:

Boorkmark & Share

Bookmark Options