The Edge : UAC

Why Didn't You Exploit IE?

tonybradley — Sat, 21 Mar 2009 01:33:00 GMT

At the CanSecWest Security Conference in Vancouver this week, Charlie Miller made headlines by exploiting a Safari vulnerability on a fully patched Mac OS X system with a fully patched Safari web browser in mere seconds to claim the Pwn2Own prize. Ryan...(read more)

Upcoming Windows 7 RC Has a LOT of Changes

tonybradley — Fri, 27 Feb 2009 19:34:00 GMT

Granted, Windows 7 will still be Windows 7. So, moving from Windows 7 Beta to Windows 7 RC will not fundamentally change your operating system. Still, the whole point of Beta testing is to identify problems and gather user feedback to incorporate changes...(read more)

Update on Windows 7 UAC Debate

tonybradley — Mon, 09 Feb 2009 13:47:00 GMT

While Microsoft has maintained that UAC (User Account Control) is not a security control, and that the behavior of UAC in Windows 7 is by design in response to the feedback and negative publicity that UAC has received in Windows Vista, they have now announced...(read more)

Windows 7 UAC Debate Explained

tonybradley — Thu, 05 Feb 2009 18:55:00 GMT

That darn UAC function just can't stand to not be the center of attention. It has been one of the most talked about features of Windows Vista - good, bad, or indifferent as your point of view might be- and now it has more or less dominated the discussion...(read more)

New Issue Identified with UAC in Windows 7

tonybradley — Wed, 04 Feb 2009 12:54:00 GMT

Soon after identifying a controversial design decision related to the default implementation of UAC in Windows 7, Beta tester Long Zheng identified another issue with UAC in Windows 7 that is of greater concern. In a nutshell, because of the inherent...(read more)

Security vs. Usability: The UAC Debate

tonybradley — Sun, 01 Feb 2009 13:05:00 GMT

Last week a Windows 7 Beta tester posted a blog entry describing a flaw or weakness in the way UAC (User Account Control) is implemented in Windows 7. For starters, although I titled this post 'Security vs. Usability' I want to to stress that...(read more)