Re:Why Windows 10 Sucks or Everything Wrong with Microsoft W...
by freeAgent on Tuesday December 31, 2019 @10:04PM
(#21926381)
You don't have to switch to an admin user account. You can provide admin credentials when needed or right click an installer and run as admin manually (and provide the credentials then).
Re:Why Windows 10 Sucks or Everything Wrong with Microsoft W...
by ChrisSD on Friday January 03, 2020 @10:57AM
(#21946965)
No. That causes a process with admin rights to run in the context of your desktop session. This is exploitable by non-admin processes running in the same session. The inter-process security in Windows is unfortunately weak when they share a desktop session.
Re:Why Windows 10 Sucks or Everything Wrong with Microsoft W...
by freeAgent on Tuesday January 07, 2020 @12:47PM
(#21982399)
You're assuming at that point that you're already compromised or running malware, though. If you aren't already infected with malware, this is not a problem. If the installer itself is malware, then switching to an admin account to install it obviously offers no protection.
Obviously this isn't ideal. I've been using this set up for awhile and mostly I can live with it but installing/updating programs is a pain. Especially if they bizarrely don't expect to be installed from a different account then the one that runs them (games can be particularly bad about this, even modern ones).
Of course there's a lot a malicious application can do even with standard user privileges (e.g. it has access to all your files and the internet). It's easier to get rid of though.