Security Hole In Windows 7 UAC

An anonymous reader writes "A prolific blogger is warning of a possible security hole in the latest beta version of Windows 7. Long Zheng has posted both a description and a proof of concept for an issue that could allow an attacker to skirt the User Account Control component in the new version of Windows. The problem, explains Zheng, is that UAC itself is controlled through system settings. This can allow an attacker to completely disable the protections without user notification. Zheng notes that the issue can be easily fixed by changing the UAC setting to notify users when Windows settings are altered, and that Microsoft could remedy the problem by prompting the user when the UAC setting is altered."

Comments

Re:Short: Don't work as Administrator

[neokushan]

I'm not directly replying to drsmithy, but I would like to point out that anyone saying "Oh well windows sucks because in Linux I can just go to the command line and..." has sort of missed the point of WINDOWS.
Not flaming or trolling, just pointing out that it's easier to click a few buttons than it is to type something into a command line and that's why "n00bs" make Windows so popular.
Jus' sayin'.