4 ms·

I think the article has a point. How is the principle of least privilege hindsight?

• KirinDave 9y ago
  I think the article is dead wrong, you don't need system privileges to encrypt user data. Users have write access to their own data.
  • kaoD 9y ago
    Yes, but that wasn't GPs line of reasoning. Even if it doesn't apply in this case it's valid criticism that you can't just attribute to hindsight.
• gruez 9y ago
  Because that comes at a cost. There's a bunch of other windows components that are kernel mode, like a http server and the graphics/gui subsystem. At the time they were written, computers were not very powerful and having those components in kernel mode probably was the right choice. As for now, who would want to spend hundreds of thousands of man-hours to rewrite everything to it's secure?