On Thu, 05 Feb 2009 14:17:32 EST, Jimmy Astle said: > It all comes back to windows biggest issue, joe the plumber > shouldn't not be running as a local admin on his box. UAC problem solved! I > still dont see how redmond missed the concept. It's *easy* to see how Redmond missed it - they *intentionally* missed it. You have to keep in mind that as a corporation, Redmond doesn't *really* give a flying f**k in a rolling donut about your computer's security - they care about their profits. We all (including the Redmond guys) know that we could drastically reduce the number of infections by making people run as non-admin and making it damned inconvenient to install possibly untrusted software. But if you care about your profits, you ignore the 4,986 geeks who won't run it because it's a total security mess, and sell it to the 193,472,415 Joe Sixpacks out there, and sell it in a config that lets Joe install any damned thing, because Joe wants his dancing hamster screensaver. In other words, they'll fix the security problems *only* when they get so bad that even Joe Sixpack (and his corporate counterpart Joe "ya want fries with that" McSE) start insisting that Something Be Done. And even then, they'll only do as much as it takes to maximize the profits (you tighten it too much, and you get double-whammied - tightening more costs more *and* loses you sales).
Attachment:
pgpX7lBo9A3UE.pgp
Description: PGP signature
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/