3 ms·
When I was at Microsoft we did not use to consider UAC as a security boundary, since there were ways to bypass it. (I used to work on windows kernel security).
by israrkhan 3y ago
When I was at Microsoft we did not use to consider UAC as a security boundary, since there were ways to bypass it. (I used to work on windows kernel security). I wonder how security team let this feature get shipped. Or perhaps now they consider UAC as a security boundary.
- hugryhoop 3y agoHow can you bypass UAC set on the highest level?
- nightowl_games 3y agoWhats the purpose of UAC then?
- withinrafael 3y agoUAC still isn't a security boundary, but rather a defense-in-depth measure.
- soraminazuki 3y agoShouldn't defense-in-depth be about putting multiple meaningful security measures in place?
- SV_BubbleTime 3y agoShallow is still a depth.