ie8 fix
madison

Windows 7 security default worries experts

Elinor Mills CNET News | October 22, 2009 5:16 AM PDT

Summary

Corporate IT departments should be pleased with new security measures in Windows 7, but consumers are still at risk of getting hit by malware despite changes in the UAC feature.
Corporate IT departments should be pleased with new security measures in Windows 7, but consumers are still at risk of getting hit by malware despite changes in the User Account Control (UAC) feature designed to help people be smarter when using applications, security experts say.

See also: Windows 7 Special Report

Probably the most talked about security change in Windows 7, scheduled for public release on Thursday, are modifications to the UAC, which was introduced in Vista. The UAC was designed to prevent unauthorized execution of code by displaying a pop-up warning every time a change was being made to the system, whether by the operating system or a third-party application.

Vista users complained that they were bombarded with the warnings and security experts speculated that as a result, many people were just ignoring them or turning them off.

With Windows 7, users can choose how often they want to be notified and the default is set to notify only when a third-party application is making a change, as well as when a change is being made to the UAC itself.

For more, read "Windows 7 default user account control worries experts" from CNET News.

29
Comments

Join the conversation!

Just In

Linux is Secure
PrestonSK 5th Nov 2009
For the life of me, I do not understand why someone would buy a Mac, when they can completely configure Gnome or KDE to replicate it. Both Linux and Mac are UNIX base code, as most of us already know. Moving onto security, of the very few viruses out there for Linux, unless the operator actually installs the virus, it will not get into the system, meaning, only an idiot would have a virus problem on Linux. Moving onto Linux-Vs-Windows, there is no competition...they both in their own right rule the market. Meaning, Linux is great for Servers, Desktop, and surfing, while Windows is great for all three as well, so long as you have the proper implementation of the network.
0 Votes
+ -
How many Windows 7 does it take...
Christian_<>< 22nd Oct 2009
How many dribble articles about Windows 7 can
there be in one week.

I heard Windows 7 is now helping the economy and
it has changed global warming to global cooling.

So the polar bears are now SAFE!!! Way to go
Windows 7 it is like the messiah Oboma has
written the operating system himself.

Maybe he will get a Nobel AWARD for coding
the OS and maybe he will give us all free
healthcare, a job shining his shoes and
let us live in a government ran housing
project!

Wow I am really admiring all of this.
0 Votes
+ -
How many?
mgp3 22nd Oct 2009
How many dribble articles about Windows 7 can there be in one week.

Probably about as many dribble articles as there are when Ubuntu decides to release another of thei bi-annual versions. Why isn't THAT a problem in your book?
0 Votes
+ -
Because...
Ceridan 22nd Oct 2009
He thinks MS is the devil or something.

It's a problem with bolth those who are in the Cult of Stallman and those that are in the Cult of Jobs... they are unable to see fault in their choice OS and they cannot see good moves by the target of their irrationnal hatred.

PS: Althrougth I will probably never touch a mac unless forced to (I just dont like the interface... it's too toy like) I do own a iPod touch(up untill now no negative comments on that) and I do use several Virtual Machines running Ubuntu or Gentoo for testing purposes or soon web browsing.
0 Votes
+ -
Um?
AzuMao 26th Oct 2009
Are you retarded or what? This article has
nothing to do with global warming, the U.S.
president, polar bears, health care, or shoes.

Rather, it is about how UAC in Windows 7 can be
bypassed by user-mode applications by default.

Also, it's a very late article. Source code as
well as compiled binaries capable of completely
sidesteping this "upgraded" UAC have been
released months ago. Google Windows 7
UAC bypass
if you don't believe me.
0 Votes
+ -
It is a step backwards.
ye Updated - 22nd Oct 2009
security = 1 / convenience

And despite the howls for more security we see convenience win over security once again. At least it's easily correctable by running as a standard user (I'm not convinced changing the default for an administrator is just as safe as Vista).

0 Votes
+ -
windows and security in same sentence?
ljenux-23043766007667558234416105604265 22nd Oct 2009
no kidding...you think zdnet readers are idiots?
Windows and security in the same sentence is only an oxymoron if you don't also have a word like 'worries', 'problem' or 'debacle' in the mix. In this case, talking about Windows Security Worries makes complete sense.
0 Votes
+ -
RE: Windows 7 security default worries experts
Loverock Davidson 22nd Oct 2009
No matter what Microsoft does for security people are still going to complain. The security seems to be just right, it will prompt you before installing anything. IE has had this feature built in for a while now. A lot of these fears are unfounded.
0 Votes
+ -
Agreed
PrestonSK 22nd Oct 2009
I agree with you. It does not matter what Microsoft does. They work to fix security problems, they are by far the most user friendly systems in the market today, and they will work with you personally, if you have found a bug. Microsoft took a beating over Vista, because of harware changes for starters. Then when they fixed 99.99% of the software problems by the release of SP2, people just have it in there head to hate Microsoft. Personally, I like Vista, and Win7, alongside of Ubunutu Linux. However, if you give me the toss-up between the three, I am using Win7, hands down. Ubunutu has its place, but Win7 is much easier to use, and secure as well.
0 Votes
+ -
ssshhhhh....
jonesyx2 22nd Oct 2009
you can say that.... we all know where this is going to end up.... another Linux windows debate.

Too many people have it in their head to hate microsoft. At the end of the day users want usability and linux just dosen't provide the same level, and ultimately never will.

Add to that the fact that the majority of programs including games are written for windows.

I use windows at home, have dual win/linux on my laptop, and thats from a linux developer.
0 Votes
+ -
Though you are probably right
Viva la crank dodo 22nd Oct 2009
No matter what Windows competitors do, you are still going to complain. And when you can't find actual issues to complain about, you make some up or exaggerate or take out of context some issue so as to complain. So how is it that what these Windows critics do different?
..which completely disable this "upgraded" version
of UAC, sure! All aboard the MS failboat!


P.S. in case you can't be bothered to spend 3
seconds searching for this,
here you go. Bye bye
"awesome security from the future" lol.
0 Votes
+ -
But why would hackers waste their time coding malware for such a small percentage of systems? We're just seeing Macs get to the market share point where a few hackers bother to create some malware. Linux has a long way to go to gather that kind of attention. When it does, it will get interesting.
0 Votes
+ -
Same old, same old...
ITsupportGuy 22nd Oct 2009
I've heard it all before, and it has been rebutted many times before, yet people keep peddling this same fallacy. If you're serious about knowing for sure if your assertion is correct, start Googling. Furthermore, you will find that Linux dominates in markets that are the most attractive to Crackers. Servers, HPC, Mainframes, where the honeypots are and the reputation of Linux systems for being extremely hard to crack is well deserved.
0 Votes
+ -
and yet
gnesterenko 23rd Oct 2009
I keep hearing about massive amounts of data being hacked and stolen. Care to explain?

The views expressed here are mine and do not reflect the official opinion of my employer or the organization through which the Internet was accessed."
0 Votes
+ -
Linux is Secure
PrestonSK 5th Nov 2009
For the life of me, I do not understand why someone would buy a Mac, when they can completely configure Gnome or KDE to replicate it. Both Linux and Mac are UNIX base code, as most of us already know. Moving onto security, of the very few viruses out there for Linux, unless the operator actually installs the virus, it will not get into the system, meaning, only an idiot would have a virus problem on Linux. Moving onto Linux-Vs-Windows, there is no competition...they both in their own right rule the market. Meaning, Linux is great for Servers, Desktop, and surfing, while Windows is great for all three as well, so long as you have the proper implementation of the network.
the entire world, when we could instead hack joe
sixpack's PC and steal his pirated porn
collection?" must be the real reason Linux is so
much more secure than Windows. Ya. That
must be it. It couldn't just be that it's a
superior product. Oh, no no no. Because Windows is
from God, right?
0 Votes
+ -
Windows 7 currently ships with a known vulnerability. Germany's federal IT security agency (BSI) has issued a warning about a high-risk vulnerability in the SMB2 protocol. This can be exploited over the network to shut down a computer with a Denial of Service (DoS) attack. The BSI says that Windows 7, Windows Vista, as well as Windows Server 2008 are affected. This vulnerability is different from an earlier SMB2 issue for which Microsoft published patch MS09-050 in September. The vulnerability remains open even after Microsoft's October patch day.

Microsoft's security practices have long been a cause for concern. In just one recent incident, Microsoft knew about another vulnerability in SMB2 since July 2009. While it did fix the problem in the final version of Windows 7 in early August, it did nothing to repair the same problem in Windows Vista or Windows Server 2008 until an independent security researcher went public about the issue.

Source: FSFE.

0 Votes
+ -
It's President Obama, not your derogatory "Oboma", which unsurprisingly you can't even spell correctly.
0 Votes
+ -
Well actually...
Rick_K Updated - 26th Oct 2009
No one really know what is name is. He ha used at least six (6)
different names. How can you correct someone when you do not know
for sure the person's real name. It may be spelled that was in
Hussein's native country.
Barraka Hussein Oboma
Barraka Hussein Obama
Barrack Hussein Obama
Barack Husin Soetoro
Barry Barack Soetoro

The list goes on, so how do we really know. I am sure his birth
certificate and school records would surly clear that up. Too bad he
has fought, at great expense, to keep this information from the public
eye,
0 Votes
+ -
You must be one of those....
tjatwood 26th Oct 2009
That also believes 9/11 was set up by the US government (on GW's watch no less). Or that man did not land on the moon. I am SO sick of this.
0 Votes
+ -
You Are An Idiot!
waldenasta 26th Oct 2009
I hope you don't procreate because it's people like you who are polluting the gene pool. Please, let Darwin theory go to work on your family! Cause you are an idiot! What's the matter fella, jealous much? It just ticks you off that a black son of an immigrant who was not born with a silver spoon in his mouth and pulled himself by his smarts made it as far as he has? I know by your comment that you are probably elderly, white, thinks that only white people should have certain positions. Thank God a lot of you "birthers" will be dead soon and this country can progress without your racist bile. STFU!! God you people make me angry!
  • Flagged
0 Votes
+ -
How in the world did ANYthing about President Obama get inserted into this discussion? This place is a madhouse!
And when will all you Linux snobs get the idea that 99.99% of the people who use computers just want to write a letter or surf the net? Windows does the job. Why should anyone who wants a computer for less money fool around with Mac or drive themselves crazy with Linux command lines?
0 Votes
+ -
Linux Command Lines
AndyPagin 27th Oct 2009
having to use a command line in Linux is as about as current as the Windows BSOD, both are history.

If were going to critisise operating systems then lets at least stick to features that actually exist in the current versions.
No command line necessary.


P.S. you're the first person to mention Linux out
of all the comments on this story.
0 Votes
+ -
Pagin's Law
AndyPagin 27th Oct 2009
Any Zdnet discussion, whatever the topic, will always eventually degenerate into a Windows versus Linux slanging match.
0 Votes
+ -
But there's no comparison
AzuMao 27th Oct 2009
For two reasons;

1. Windows is an operating system, Linux is a
kernel.

2. Windows sucks.
0 Votes
+ -
RE: Windows 7 security default worries experts
jcrowder0027@... 27th Oct 2009
It keeps the software rolling around for a fix. That is just good business. Fear and worry sells product.

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

ie8 fix