Windows Vista UAC Hack Windows Vista UAC Hack

Un nuovo ricercatore ha scoperto come eludere l’user access control di Windows Vista (l’ UAC è una caratteristica di Windows Vista per prevenire l’installazione automatica e non autorizzata di malware o software indesiderato). A new researcher has discovered how to circumvent the user access control of Windows Vista (l 'UAC is a feature of Windows Vista to prevent the automatic installation and unauthorized malicious or unwanted software). Il nome della persona è Robert Paveza (web application developer) ed ha pubblicato un documento per dimostrare come infettare computers su cui gira Windows Vista con privilegi limitati e su cui è attivo l’ UAC. The name of the person is Robert Paveza (web application developer) and has published a document to demonstrate how to infect computers running Windows Vista with limited privileges and which is active l 'UAC.

Under Paveza’s attack, the malicious code would ride on seemingly innocuous software that could, in fact, run as advertised and without any elevated privileges needed, leaving the work of infection for later. Under Paveza's attack, the malicious code would ride on seemingly innocuous software that could, in fact, run as advertised and without any elevated privileges needed, leaving the work of infection for later.

“For instance, if users believe they are downloading a ‘Pac-Man’ clone, such a game could be run while the malicious software did its work in the background,” Paveza wrote. "For instance, if users believe they are downloading a 'Pac-Man' clone, such a game could be run while the malicious software did its work in the background," Paveza wrote. “It is important to note that, realistically, once the proxy infection tool has been run on the target machine, the target is effectively infected.” "It is important to note that, realistically, once the proxy infection tool has been run on the target machine, the target is effectively infected."

La notizia lascia un pò di sconcerto in quanto l’UAC è una caratteristiche di sicurezza di Windows Vista cavallo di battaglia della Microsoft.. The news leaves a little puzzled because the UAC is a security features of Windows Vista horse battle in the Microsoft ..

DA TECHNET DA TECHNET : “User Account Control is part of Microsoft’s defense-in-depth strategy to provide multiple levels of protection in Windows Vista. : "User Account Control is part of Microsoft's defense-in-depth strategy to provide multiple levels of protection in Windows Vista. Notwithstanding the exceptions noted above, all levels of User Account Control offer greater protection than running a previous version of Windows with full administrator privileges, as most users do today. Notwithstanding the exceptions noted above, all levels of User Account Control offer greater protection than running a previous version of Windows with full administrator privileges, as most users do today. To further improve the security of Windows-based PCs, Microsoft continues to recommend using up-to-date anti-malware software, using a firewall, and keeping the PC To further improve the security of Windows-based PCs, Microsoft continues to recommend using up-to-date anti-malware software, using a firewall, and keeping the PC
up-to-date with the latest security updates.” up-to-date with the latest security updates. "

L’UAC è stato tirato in ballo quando è stato scoperto che The UAC was pulled at stake when it was discovered that Windows Vista era vulnerabile da un cursore animato Windows Vista was vulnerable from an animated cursor . Quale sarà la contromossa della Microsoft ?? What will the contromossa the Microsoft?

FONTE: SOURCE: PC WORLD PC WORLD