Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
×

Comment Re:Halt (Score 1) 420

You now point I hope...

...that if you have to check out the program before running it, the flag becomes pointless.

you should do this regardless of any security. I ALWAYS check programs (if program is small enough I even scan the code) before running it, thats what responsible network administrators do. If you are not checking programs out, then I would not be surprised if you were or are attacked.

Comment Re:Halt (Score 1) 420

Also I would like to thank you for using linux, people like you and me are way ahead of the rest of the population still plagued with problems such as the one we are discussing. (not that linux is bulletproof, but it is close). The system I am proposing is close to the linux approach. Only that the admin cannot do daily user tasks in that account. In linux root can do those tasks. In my approach, they cannot.

Comment Re:Halt (Score 1) 420

It is not impossible, in fact it is very possible.Microsoft would have to create a flag so that programmers can set it to tell the system that it is a security related program and thus should be allowed to execute under the admin account.

Once they do that, the game's over, because the malware programmers would all set that flag, run as admin and go right around any anit-virus software you might think you were running to protect your computer. I'm a Linux user and advocate, and I wouldn't want to see that happen.

Please read above mentioned points, that topic has already been covered.

To save time ill summarize. Malware authors are going to set that. Its expected, and if an admin executes the bad program without checking it out. You now point I hope...

Comment Re:Halt (Score 1) 420

Also I should explain the last point. Command prompt couldn't be blocked. I need it as an admin. Administrators should always check foreign scripts before executing them. Its not that hard to get the source code to a batch file or VBscript or (insert favorite cmd language here). Admins can always download using their standard accounts and switch users to execute it. Its more inconvenient but it takes almost as long to display and read a UAC prompt anyways. A switch user takes what 10 seconds. Thats a really long time.

Comment Re:Halt (Score 1) 420

Microsoft would have to create a flag so that programmers can set it to tell the system that it is a security related program and thus should be allowed to execute under the admin account.

The problem with your implementation suggestion is that software developers who don't respect good security practices as it is will not respect such an API. If it is easier to set a flag asserting that the program is "security related" than to follow good software development practices, that is what they will do.

If the security flag was set then the program would not be available to the standard user, only to the admin. That would defeat that argument. If the admin still used the poorly coded program, thats his fault. I'll be awaiting his payment.

Comment Re:Halt (Score 1) 420

1. Im assuming that the virus authors probably would set that flag which goes back to my "the user should not be a complete retard rant"

2. Allowing a web browser to run in admin as a security flagged app! Are you !@#$'ing kidding me!!! Please go shoot yourself, or at least get re-educated in basic security principals. Thats exactly what the system would be aimed at stopping.

Like it was mentioned before, all systems have its pros and cons and when weighed (microsoft controlled vs. developers) I trust that a game developer wouldn't set the security flag. Another thing that I should mention is that apps with the security flag set can only run as admin. So if a web browser had the flag set, not many people would use it then, and vice versa if a virus writer set the flag then only retards could execute it.

Comment Re:Halt (Score 1) 420

What you suggest is either impossible, extremely undesirable, or both, assuming that by "they" you mean Microsoft.

For them to prevent certain classes of applications from running, without special knowledge, would require a kind of analysis similar in nature to solving the halting problem - a problem well known to be unsolvable.

Then the course of action is to require applications requiring root privileges to be signed by Microsoft, essentially making Windows a closed platform for developers. Furthermore, any applications they sign would have to be bullet-proof, getting back to the halting problem.

It is not impossible, in fact it is very possible. Microsoft would have to create a flag so that programmers can set it to tell the system that it is a security related program and thus should be allowed to execute under the admin account. There is no microsoft involvement there except that they have to create a flag in the API. Not impossibly hard to them do. With that in mind, I don't see how this is impossible. I didn't say we could completely prevent attacks, just make them a hell of a lot harder. I am assuming however that the user that knows how to get in and use the admin account is not a complete retard. If they are and do execute a virus as admin, then they are retarded and deserve to pay me to fix their computer. Yes, I run a computer business. So offering this could hurt me in the long run, but I hate seeing all the pings and scans and attacks against my firewall everyday. Something needs to be done.

Comment What they need to do... (Score 5, Interesting) 420

What they need to do is limit all users to not be administrators. They should create the admin account so that it can ONLY do admin tasks. It cannot run programs like office or games. It can only run security and diagnostic apps, adding-remove apps. If they restricted admin users from using their account for daily use and only for admin use, that would significantly reduce the attack surface for crackers.

Comment thats cool and all... (Score 1) 76

but doesn't the object need to be very very light in order for it to work? I mean birds have hollow bones and thats how they are very light, they would need a very small very light camera or whatever they plan on using on this "flapping object" or it wont fly. Or have they made things that im not aware of that are light like this?

Comment Re:I don't think it would help... (Score 1) 254

I didn't ask if it was morally correct to have free music, I just used that as an example to state a fact that DRM or no DRM people are still gonna pirate the same if they want something they can afford. Its like shoplifting, they are taking it because they can't afford it, but they want it anyways.

Slashdot Top Deals

PURGE COMPLETE.

Working...