US votes to outlaw spyware

  • Thread starter Thread starter John Fitzsimons
  • Start date Start date
Using Windows without admin privileges is a PiTA mainly because a lot
of software is written assuming that it will have admin rights. E.g.,
many apps assume that they have write access to the Program Files
directory. Many of the problems created by such apps can be overcome
by explicitly giving them admin rights, but it should not be necessary
to lower security in that way just to make an app useable.

How much blame belongs to Microsoft for encouraging bad coding for so
long (they don't encourage that any more) and how much belongs to
vendors who write the bad code is a matter of opinion, but the bad
code is out there, and not just in old apps written before MS
discovered the notion of limited access.

There are a lot of resources available for those who'd like to try
running as a non-admin. The first two links here have a lot of info
as well as links to other resources. The third one is Microsoft's
list of broken software.

<http://blogs.msdn.com/Aaron_Margosis/>
<http://nonadmin.editme.com/>
<http://support.microsoft.com/default.aspx?scid=kb;en-us;307091>
Click to expand...

Thanks, that was kinda my point. So MS tries to fix, or at the very least,
minimze the existing problem, and it's MS's fault cause the badly written
application doens't behave itself in a more secure environment. And cause
it's easier to run as admin, it must be MS's fault that this opens my
system up to all sorts of ugliness.

I don't like the fact it's easier to run as admin than user, but that's the
way it is. The point was that there are choices, and given the choice,
people choose the easier less secure route than the more secure route. Then
blame someone else when their machine gets infected and slows to a crawl,
or requires a re-install of the OS to clean it.
 
H-Man said:
No great advantage, that's the point. I set these machines up this
way as a result of the new owners requesting it, not bercause it's a
good idea. The problem is, with a user account, everytime you want to
make a system
change, or install some software, you need to log out and then login
as administrator, make the change and then login as user again. For
most
people this is just too much to deal with and therefore choose to run
as root 24/7. As always, a less than completely secure way to run
your system.
Click to expand...
Which is why you should browse the web stripped of administrator privileges.
That's when there is the most risk. An easy way is described here.
http://msdn.microsoft.com/security/.../library/en-us/dncode/html/secure11152004.asp
 
Mel said:
It's just another joke like all the other jokes that precede it!

They outlawed alcohol, but people still drank.

They outlawed drugs, but people still take drugs.

They outlawed SPAM, and their's still SPAM.
Click to expand...

Now don't tell me you believe that the "CAN-SPAM" Act was written to
protect the American citizens from spammers... it was written to
protect spammers from the Americam citizens...
Now they outlaw Spyware, and their'll still be Spyware.

The Spyware law is an excuse which allows the Police to use Spyware
and Keyloggers to track online activities.
Click to expand...

Not necessary... ever heard of the USA-PATRIOT Act? (Most of the time
referred to as the PATRIOT ACt) They don't need a law to do so, just a
"secret supoena", and Mel is done.

Going back a bit in the thread... Microsoft is installing spying
themselves... If I may quote from a page in Technet about MSN-Explorer
(the version offered in XP SP2):

- *Specific information sent or received*: MSN collects personal
information such as e-mail address, name, home or work address, and
telephone number. MSN also collects demographic information, such as
ZIP Code, age, preferences, interests, and favorites. Information about
the computer hardware and software is also collected. This information
may include IP address, browser type, domain names, access times, and
referring Web site addresses. MSN uses .NET Passport to provide
registration and sign-in services. All of the registration information
provided is stored by MSN, and some or all of that information will
also be stored by .NET Passport.
Now, go and find that information on your regionalized EULA for the
lot... I couldn't find any reference to the above information, which
can be found at (for those interested):
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/intmgmt/1
5_xpmsn.mspx
Which, in my dictionary makes the whole set up spyware. And MS wants to
_deliver_ ANTI-spyware?? Talking about the fox guarding the hen house...

Regards,
Dick
Click to expand...
 
Exactly, funny how many people will not do this because it's inconvenient.
Click to expand...

Inconvenient?What the fukken are you talking about? You geek nerds think
that 99% of the world has any time or ability to do the things in that
article? Fukken no, let me whelp you upside da heed and drag you back to
reality.

Get a fukken grip.
 
Which is to say simply that spyware isn't freeware. However, since
spyware is often passed off as being freeware and as such gives freeware...
Click to expand...

You got it straight yet? Sure about it?
 
Exactly, funny how many people will not do this because it's inconvenient.
Click to expand...

The solution looks to be pretty easy to setup.

I thought that I would use the above for all apps that I use that
connect to the internet, including registered Agent for news. I seem
to have lost long filenames in saving binary files though. All are
saving in 8-3 format. That's really not a big problem... but why would
you think that this is happening???

C:\Warez\DropMyRights.exe "c:\agent\agent.exe"



"Summary: Michael Howard discusses how you can run as an administrator
and access Internet data safely by dropping unnecessary administrative
privileges when using any tool to access the Internet. (10 printed
pages)"

I tried changing to compatibility mode for 98\Me and 2000. No change.
All of my partitions are NTFS and I've never seen another 32 bit
program do this.

Would you think that this is an Agent bug?
 
In this case, looking at the article would have saved you the typing.
No one has sued Microsoft over spyware removal. The only lawsuits
mentioned were against PC Pitstop and Lavasoft.
Click to expand...

Excuse the gaffe. You're right. MS hasn't been sued yet, but expect to be
next because of their anti-spyware program.

-- Bob
 
Inconvenient?What the fukken are you talking about?
Click to expand...

There's some great grammar, huh?
You geek nerds think
that 99% of the world has any time or ability to do the things in that
article?
Click to expand...

A question structured as a statement. So are you asking or telling?
Fukken no, let me whelp you upside da heed and drag you back to
reality.
Click to expand...

Please do.
Get a fukken grip.
Click to expand...

I'm not the one that's come unglued here.

I was strictly speaking from my experience. The many people that choose not
to run as user do so because they find it inconvenient. It's the primary
reason those people gave me! So now I should tell falsehoods so that you're
happy?

Please, if you want to be taken seriously in any discussion, please act
like a reasonable member of society. If you can't do that, don't expect to
be given any higher regard than that given a raving lunatic. Your language
and attitue is not within the tone of the discussion as it was.
 
There's some great grammar, huh?
Click to expand...

You have to ask?
A question structured as a statement. So are you asking or telling?
Both.


I'm not the one that's come unglued here.

I was strictly speaking from my experience. The many people that choose not
to run as user do so because they find it inconvenient. It's the primary
reason those people gave me! So now I should tell falsehoods so that you're
happy?
Click to expand...

I agree that it's inconvenient if you are in the 1% that can set that
fukken shit up in the first place.
Please, if you want to be taken seriously in any discussion, please act
like a reasonable member of society. If you can't do that, don't expect to
be given any higher regard than that given a raving lunatic. Your language
and attitue is not within the tone of the discussion as it was.
Click to expand...

Which society's standards you want me to meet? American, Samoan, The Great?
 
The solution looks to be pretty easy to setup.
Click to expand...

A huh.
I thought that I would use the above for all apps that I use that
connect to the internet, including registered Agent for news. I seem
to have lost long filenames in saving binary files though. All are
saving in 8-3 format. That's really not a big problem... but why would
you think that this is happening???

C:\Warez\DropMyRights.exe "c:\agent\agent.exe"
Click to expand...

A huh.
 
Back
Top