techPowerUp! Forums

techPowerUp! Forums (http://www.techpowerup.com/forums/index.php)
-   News (http://www.techpowerup.com/forums/forumdisplay.php?f=4)
-   -   Windows Vista UAC 'Nails' Rootkits (http://www.techpowerup.com/forums/showthread.php?t=61344)

zekrahminator May 27, 2008 03:02 PM

Windows Vista UAC 'Nails' Rootkits
 
Most would agree that Windows Vista's most obvious security feature, UAC, which asks a user for confirmation every time the computer decides to perform an administrative task, can become quite annoying. However, past whatever annoyance a user might perceive, it does have some very useful features. When a security firm pitted seven anti-virus suites against roughly 30 rootkit infections. Unfortunately, none of the programs found all of the rootkits. However, when tested on a Vista platform, Windows Vista's UAC actually prevented the rootkits from getting terribly mangled into the system, which made removal and detection a little easier. If nothing else, UAC kept the system more stable while the rootkit did its thing, and prevented a lot of damage from happening. In fact, when the security firm pitted the rootkit against Windows Vista UAC by itself, all of the rootkits were stopped right in their tracks.

Source: Neowin.net

PVTCaboose1337 May 27, 2008 03:13 PM

The first thing I did on Vista? Turned off UAC because it does not do crap. (I mean it does, but allows me to do nothing)

Triprift May 27, 2008 03:13 PM

It doesnt stop the fact its as annoying as ya get

Im sure its super great at security but thanks to its mega annoyance ill just use Kaspersky n my router for security.

Kreij May 27, 2008 03:36 PM

I guess I am not sure why people think it is all that annoying.
You only have to perform one extra mouse click to allow a program to run, and then only on programs that could be (potentially) problematic.

bowman May 27, 2008 03:53 PM

It was really annoying to begin with, now I'm used to it.

What's annoying, is when the UAC popup takes AGES to pop up. Some sort of freeze or bottleneck, some times it takes ages compared to what it'd take just starting the app.

blobster21 May 27, 2008 04:06 PM

Great ! UAC saved the day...but still...

it's comparable to Ubuntu's way of asking root password whenever you perform administratifs or potentially harmfull actions.

in the end, the regular joe (i'm one of them) ends up desactivating UAC and/or log himself as root and kiss the annoyances goodbye

HaZe303 May 27, 2008 04:06 PM

Quote:

Originally Posted by PVTCaboose1337 (Post 811424)
The first thing I did on Vista? Turned off UAC because it does not do crap. (I mean it does, but allows me to do nothing)

Same here, I even use vlite to disable it so I never have to deal with it in the first place? Maybe I shouldnt?:)

jammy86 May 27, 2008 04:16 PM

Quote:

Originally Posted by Kreij (Post 811469)
I guess I am not sure why people think it is all that annoying.
You only have to perform one extra mouse click to allow a program to run, and then only on programs that could be (potentially) problematic.

One extra mouse click, every single time you click the mouse on ANYTHING. If you dont find it gets in the way much, you dont use your computer as intensively as most on here do.

Vista goes like this:

Install
Turn off disney style start menu (same with XP)
Turn off UAC
Turn off the security centre telling me I'm not secure...
finally start to use it.


You know its true.

JAmes.

jydie May 27, 2008 04:33 PM

I don't use Vista yet, but Spybot will pop up a confirmation window when a program tries to update the registry... and ZoneAlarm does the same when a program tries to go out to the internet. I thought they were annoying at first and barely paid attention to what they were telling me. But after having to re-install Windows XP due to a nasty virus, I have grown to like the confirmation windows. I now WANT to know what is going on "behind the scenes".

The internet is not safe, and I prefer to have my main PC as secure as possible.

If Vista is truly safer to use, I might have to consider upgrading my main PC...

Kreij May 27, 2008 04:50 PM

I am not sure what you mean by "click the mouse on ANYTHING".
90% of the applications on my computer do not popup a UAC dialog box for verification.
It is only programs that do something at a lower (or questionable) level such as ATITool, CCleaner, CoreTemp, etc.

Of course, if 90% of what you do involves programs like these, then yes, I can see it getting a bit tedious.

Conti027 May 27, 2008 05:19 PM

Quote:

Originally Posted by PVTCaboose1337 (Post 811424)
The first thing I did on Vista? Turned off UAC because it does not do crap. (I mean it does, but allows me to do nothing)

I did the same thing.

Kreij May 27, 2008 05:40 PM

One of the first things I did when I installed Vista was to shut off the UAC and driver signing.
After reading this post, I thought I would try UAC again to see how often it pops up.
Not very often actually.
I think that it would be prudent to leave it on unless you are using programs repeatedly that cause a popup. If I was going to run some benches I would turn it off for the duration of my testing and then turn it back on when just doing regular work.

Just my 2 cents. Whatever works for you is what you should do.

Mad-Matt May 27, 2008 07:10 PM

I found Tweakuac useful for enabling Silent uac mode. the benefits of uac without the annoyance. although security centre still thinks its off so that side is still an annoyance requiring dissabling it ;)

Cold Storm May 27, 2008 07:19 PM

I think UAC is good for the every day joe... Ones who don't know that much about computers but just to get online and talk... But, for people like us, I can see it getting annoying. I've installed Vista about 4 times in the past few months because of killing things... and After the first two times, I made sure it was the first thing I shut off! Good tool, but No need for me to use it.

Haytch May 27, 2008 07:42 PM

So what they are trying to say is that Vista being so annoying finally has a single usefullness! Except, its not all that because all it does is make the clean up proceedure a little easier. End result, Vista was still compromised. So to us end users, its back to useless.

I have no doubt that UAC promotes more trouble then it resolves.

Exceededgoku May 27, 2008 08:29 PM

I still have mine activated, and to take it one step further ive made it ask for my password as well... Am I sad lol?

Dia01 May 27, 2008 08:36 PM

Well, something that annoying surely has to have a benefit.

Laurijan May 27, 2008 08:39 PM

Spybot´s tea-timer function does the same in XP? or am i mistaken..

jydie May 27, 2008 09:00 PM

Quote:

Originally Posted by Laurijan (Post 811919)
Spybot´s tea-timer function does the same in XP? or are i mistaken..

Yes, you are correct. :)

Rebo&Zooty May 27, 2008 09:11 PM

uac=microsofts unpolished attempt to copy how linux handles user security........


blah, it drove me crazy when i was using vista.........i dont need asked every 20sec if im sure i want to do something.

http://www.youtube.com/watch?v=uDiaQrZviyc

saddly this mac vs pc video is more true then any of the rest.........

imperialreign May 27, 2008 09:54 PM

hmmm - so Vista blocks rootkits . . .


I wonder if that's because it's an extravagant, over-bloated, selfish rootkit itself, and doesn't play nicely with others :wtf:

Rebo&Zooty May 27, 2008 10:04 PM

Quote:

Originally Posted by imperialreign (Post 812046)
hmmm - so Vista blocks rootkits . . .


I wonder if that's because it's an extravagant, over-bloated, selfish rootkit itself, and doesn't play nicely with others :wtf:

thank you for that, it made me lulz :D

Davidelmo May 27, 2008 10:34 PM

Quote:

Originally Posted by blobster21 (Post 811510)
Great ! UAC saved the day...but still...

it's comparable to Ubuntu's way of asking root password whenever you perform administratifs or potentially harmfull actions.

in the end, the regular joe (i'm one of them) ends up desactivating UAC and/or log himself as root and kiss the annoyances goodbye

Werd.

I hate UAC, but I recently insalled Ubuntu on my laptop and to be fair, tha is probably even worse from an "annoyance" point of view (i.e. you need to enter a password.. not just click "ok".)

However, I actually have confidence that Ubuntu is secure.. I don't really feel that UAC makes Visa any more secure.... it just annoys me when I'm trying to delete something and I have to click an exra time.

Haytch May 28, 2008 12:35 AM

Quote:

Originally Posted by Exceededgoku (Post 811892)
I still have mine activated, and to take it one step further ive made it ask for my password as well... Am I sad lol?

Not sad, just extremely patient. Patience is something i lack!
Allow / Deny ? ' You frickn just asked me!

CrAsHnBuRnXp May 28, 2008 01:23 AM

Still not worth having on.


All times are GMT. The time now is 09:40 AM.

Powered by vBulletin® Version 3.8.6
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.