5 ms·
Because: a) Adding a root CA to the cert store requires UAC elevation prompt. b) The certificates are more useful in verifying if a given driver was issued by
by zeusk 9y ago
Because:
a) Adding a root CA to the cert store requires UAC elevation prompt.
b) The certificates are more useful in verifying if a given driver was issued by the manufacturer it says it was issued from.
- TylerE 9y agoRebuttal: Users just blindly click ok so UAC doesn't actually do anything useful.
- iancarroll 9y agoA better rebuttal is that UAC is not a security boundary and bypassing it is trivial.
- dingo_bat 9y agoHas that been done? I have been thinking it's pretty secure!
- iancarroll 9y agoYes. UAC was not really designed as a security boundary in the first place. Here are some public exploits for it: https://github.com/hfiref0x/UACME https://github.com/hfiref0x/UACME
- Dylan16807 9y agoIt's pretty bad. Even if you put it on max, disabling automatic elevation, there are still flaws that microsoft doens't bother to fix.
- zeusk 9y agoWell, the same is true of any osx pre high sierra. A malware can disguise as installer utility and it can make modifications to system or install kexts after user okays it (keychain saves the password). Linux makes you type in the password manually every time for elevation but that will just make the average consumer remove or use unsafe passwords for their accounts.
- TylerE 9y agoThere are plenty of ways of NOT having to type the password on linux that are functionally equivalent to keychain (e.g. sudo in some configurations)
- zeusk 9y agoSure you can customize /etc/sudoers to your heart's content but that's not the point here. (btw, you can use group policy to enforce password at UAC prompt and limit users from system wide changes to Windows). The point is about a secure & safe way for a common person to authorize an application that wants to make changes to the system and as the defaults stand, sudo prompting for password at every elevation attempt is worse off in my opinion.
- shakna 9y agoDoesn't sudo have a default time setting? Only once every ten minutes per process does it elevate? > The point is about a secure & safe way for a common person to authorize an application I'm not sure that's even possible. The common person doesn't tend to fear putting their credit card info into a random online form.