Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

A better rebuttal is that UAC is not a security boundary and bypassing it is trivial.


Has that been done? I have been thinking it's pretty secure!


Yes. UAC was not really designed as a security boundary in the first place.

Here are some public exploits for it: https://github.com/hfiref0x/UACME


It's pretty bad. Even if you put it on max, disabling automatic elevation, there are still flaws that microsoft doens't bother to fix.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: