Saturday, February 7, 2009

The UAC Debacle

As I’m sure you’re all aware (if you’ve been following the very popular Windows 7 beta) there has been some issues with how Microsoft is handling UAC (user access control) in Windows 7.  Initially they wanted to lower the default alert threshold so users wouldn’t be bothered when changing settings for Windows since it was a major complaint with the way Vista operated with UAC.  Then in an outcry from the security-conscious testers/observers Microsoft bends to their demands for it to be more like Vista (more secure but more alerts) considering malware on the system could lower or disable UAC and not prompt the user—leaving the system open to run anything without the users consent.

It just seems that Microsoft can’t please everyone and the user base can’t agree what they collectively want from the vendor.  Personally I feel that Windows should be as secure as possible and the user needs to adapt to the world in which we live where security is a survival trait—we can’t remain to be lazy and naive about real threats that exist and no Mac OS X isn’t the solution.  Apple handles their version of UAC the same way (high alerts) and they have already proven that they aren’t immune to attack.

No comments:

Post a Comment