Re: Let's talk about windows seven end of life...
Disabling UAC is precisely the wrong thing to do. Common sense is not a cure to prevent all software vulnerabilities, and just because you use "a little common sense" does in no way make you invulnerable. Most games save their save data outside the installation directory; a user should never have to write to program files/program files (x86) ever unless they're running an installer/uninstaller/whatever. Program files/program files (x86) is a protected directory. Never disable UAC. Ever.
UAC does not "complain" when its notification setting is higher than zero. It prevents tools from performing possibly malicious actions and gives you a chance to intervene if necessary. Setting the notification slider to zero just turns that off, meaning that any application can gain elevated privileges and you'd never know it. Turning off UAC means that an application can write to pretty much anywhere on your system and you'd never know it.
As for the last point in 29, someone who does not have any knowledge about the internals of a computer should still have an administrative account if they're IT or if its a consumer device. But never, ever turn off UAC. Just don't. If you do, your opening yourself up to maliciouscode that can bypass your "common sense". "Common sense", as I said, is definitely not a cure. In fact, in 2017 CCleaner's website was hacked and CCleaner was replaced with a CCleaner that behaved almost exactly the same as the original tool. Even if you closed the application, it wouldn't actually terminate. After 10 minutes of using it would connect to its command and control server and await orders. If you didn't know this information and happened to download the malicious CCleaner binary, what would your "common sense" tell you? How exactly would it protect you from a threat you can't even see?
Yes, there's antimalware/antivirus software. But antimalware/antivirus software is not perfect. A bit of human oversite is also required.. The kind of reasoning for disabling UAC that I've seen in this topic is the exactly same (and misguided) reasoning for not using encryption: "Why should I use it if I have nothing to hide?" Both sets of reasons are incredibly naive viewpoints and are only going to cause you harm in the end. After all, Icould ask you a nice counterquestion: why do you lock the door of your house before you leave if you have nothing to hide? Why do you have a security alarm system if you've got nothing to hide? If you really have nothing to hide then you won't mind leaving all your entryways unlocked so I can prance in and look around when your away, right?
Of course, that's flawed. You'd have a huge problem with leaving your house unlocked and vulnerable. Every computer system should be made with security in mind. It doesn't matter if your not storing any supposedly sensitive information on that system at the time of its creation. You'd still want to protect it and the data on it because if you didn't, people could just hack it and modify that data. And, of course, you can't ignore the possibility that you may store sensitive information in the future on it. Its much better to secure a system from the start instead of securing it "after the fact".
-- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
