On Recent Chaos: Windows 7 UAC Flaw
The wildly popular beta of Windows 7 is getting wildly flamed on one “by-design” flaw concerning UAC function. Lots of people focus on this and things seem to start to annoy. Well, should it?
To any news surfacing everywhere nowadays, you have to think twice and investigate more to know what’s really behind the words.
So according to those bloggers, Windows 7 is now greatly undermined by one flaw in UAC, but is it true?
Before I write any bit more, just out of curiosity, I’d like to ask, point-blank, quite serious, that from when do these people start to care about UAC function?…one that was wildly pointed at as the black sheep when queried about Vista impressions.
Okay, I got it. So people like UAC now, regardless of the fact that many of people don’t even know what it’s short and some even think UAC is a program, just like Windows Defender. Okay. So people now like it, at least like to talk about it.
The somehow too well covered flaw in Windows 7 recently is confirmed as “by design” by Microsoft, which under the hood is a consideration, I believe, that Microsoft made as the response to people’s Vista complaints.
The flaw is in Windows 7, the internal UAC component won’t check any files as long as it has signatures from Microsoft, thus resulting the potential scenario that a Microsoft’s component such as rundll32.exe could be used as proxy to run malicious codes.
Apart from any flaw by design or not, we should be minded that nothing like this exist in Windows XP and very a lot of people are still quite happy with their obsolete XPs. Considering the fact of those people who actually chose to pursuit Vista, many of them just simply turned off the UAC function to save themselves from endless annoyance.
Now you got me? Even though Windows 7 has this flaw, it could still be perceived as the ACTUALLY safest OS because people normally don’t turn off the refined UAC in Windows 7 as they start to like it this time.
You got my idea? Okay. Let’s go back to the flaw itself. Microsoft has their reason to claim it a feature by design. The notorious UAC annoyance in Vista-era is mostly due to it prompting way too much about way too many details inside the OS, including, for instance, moving or even renaming a file on system drive. So Microsoft learnt well their lesson and provided its solution this time. Theoretically, they created a kind of white list that contains information on all the components allowed to run without any prompt of privilege shifting, thus slicing greatly the happening of prompts altogether. Some blogger claimed the actual method Microsoft deployed is using a flag to identify all the automatically allowed components for privilege shifting.
This feature indeed may be potential to be exploited to run malicious programs which will be fixed it in latest internal build by Microsoft to respond people’s concerns, which will be fixed in their latest internal build by Microsoft to respond people’s concern. We will see the fixed OS when Microsoft released RC in April.
However, this is not a feature that will sharply undermine the total security of Windows. After all, Windows is not a system with anti virus function integrated. If Windows XP could be a great OS, there will be no reason for Windows 7 to be not one of the same kind.
The same people had been talking about how useless and stupid the UAC in Vista was, and now they started to compare UAC in 7 against Vista and now they concluded that UAC in Vista could provide better protection. Funny story.
Face the reality, these people are everywhere. Nowadays, people had been getting tougher with demands while much less patient when reviewing things. They now dislike easily and hate easily. Windows Vista was almost killed by these people’s bluntness and arrogance. Now for Windows 7, things will definitely getting better, but still there will be noises.
People, a corporation should be respected when they did things right and nice. So let’s respect Microsoft and wait for them to make changes.
Add a comment