Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

From my understanding there will be a single one-off UAC popup which will allow a service to be installed with higher rights - that service will then carry out installations from that point on, and will be able to do so silently, as it will have the rights to do so.


Why is there still a need to deal with UAC? Why does it need admin rights in the first place? Sounds entirely avoidable (see: Chrome).


Chrome avoids it by installing into the User's own folder. Firefox is installed in Program Files, which requires user authorisation.

Arguably, this is the correct place to install, as it means that the application is usable by anyone on the PC, rather than having to be installed for each user individually.

You can find more information here: http://www.brianbondy.com/blog/id/125/


Chrome does a non-standard install and also can be self modified which isn't secure. Chrome could be replaced by a keylogger+chrome by anything running on the system.

That's why admin privileges are required for accessing Program Files to begin with.

Using a separate updater process is actually the clean way to go, on Windows.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: