Beta

Slashdot: News for Nerds

×

Welcome to the Slashdot Beta site -- learn more here. Use the link in the footer or click here to return to the Classic version of Slashdot.

Thank you!

Before you choose to head back to the Classic look of the site, we'd appreciate it if you share your thoughts on the Beta; your feedback is what drives our ongoing development.

Beta is different and we value you taking the time to try it out. Please take a look at the changes we've made in Beta and  learn more about it. Thanks for reading, and for making the site better!

Beyond Trust Warns that UAC is Still Broken.

twitter (104583) writes | more than 4 years ago

Windows 2

twitter writes "Enterprise users looking for a reason to upgrade from XP will be disappointed with Windows 7 security issues. BeyondTrust, a Least Privilege Management provider for Windows, warns that UAC changes are ineffective and not up to Federal regulations.

Despite growing CSO and CISO recognition of the need to deploy end-users as standard users, and requirements by the Federal Government for the removal of administrator rights under the Federal Desktop Core Configuration (FDCC) mandate, Windows 7 includes no significant changes to UAC for standard users.

"For enterprises, there is little benefit to the changes to User Account Control in Windows," said John Moyer, CEO of BeyondTrust. "Windows 7 introduces cosmetic changes to reduce the prompts that plagued Vista, but it does nothing to fix the underlying productivity and usability problems for standard users... Windows 7`s UAC slider puts end-users in charge of the security decision of what to run with administrative privileges, which is essentially an invitation for malicious users, hackers and malware."

It is amazing that Microsoft can not do what Unix and every gnu/linux distribution has done for decades, provide real user privilege separation. Where these are provided, it is easy to add GUI front ends like kdesu, so that authentication is simple and painless for the few times it is needed."
Link to Original Source

cancel ×

2 comments

"Microsoft"? (0)

Anonymous Coward | more than 4 years ago | (#29334935)

"Microsoft"? Did you just say Microsoft??

hahahahahahaha!!!

"Microsoft"?

Looks like you'll do anything to get on the front page, boy! I guess you're tamed [boycottnovell.com] ? hahahahaha!!!

hahahaha!

Helping Google Index. (0, Troll)

twitter (104583) | more than 4 years ago | (#29335887)

Yes, I said that. I realized that Google does not search or index "M$". Consider it a bug, but I'll work around that, just for you. It is easier for me to type M$ than Microsoft, but Google is unwilling or unable to serve that lampoon. Sweet dreams, anonymous astroturfer.
Check for New Comments
Slashdot Account

Need an Account?

Forgot your password?

Don't worry, we never post anything without your permission.

Submission Text Formatting Tips

We support a small subset of HTML, namely these tags:

  • b
  • i
  • p
  • br
  • a
  • ol
  • ul
  • li
  • dl
  • dt
  • dd
  • em
  • strong
  • tt
  • blockquote
  • div
  • quote
  • ecode

"ecode" can be used for code snippets, for example:

<ecode>    while(1) { do_something(); } </ecode>
Create a Slashdot Account

Loading...