2020-02-24 18:58:55

@25 I have done some research during one of my classes while I was at college. You really need to have UAC on for your protection encase a program wants to elevate to use admin rights, I only see NVDA using admin righhts for installing the screen reader. I would actually turn the UAC to the hiest level, some of you might not like that level but, it will then promp to make changes to the system. I find it to be a lot safer setting it to the max level.

2020-02-24 19:10:04

@25, NVDA doesn't run with elevation unless it explicitly requires it. It never runs with elevation during normal operation unless your changing preferences.

"On two occasions I have been asked [by members of Parliament!]: 'Pray, Mr. Babbage, if you put into the machine wrong figures, will the right answers come out ?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question."    — Charles Babbage.
My Github

2020-02-24 19:12:23

I mean, you can say that, but how often will it require it? Besides, regardless of if it does or does not, you do need to give it access to install in the first place. If you don't give it admin rights it will have the same restrictions as the portable copy, so you might as well not install it.

2020-02-24 20:01:11

I'm not here to tell you how to run your show.  Your computer is your computer and entirely so.  What I am here to tell you is that you should never assume you're safe, and you should definitely not assume you're safer than those who do have extra security precautions enabled.
If you have seriously taken any time to read any of my posts, you know that I spent the better part of my computing life without antivirus, and certainly without UAC.  Today, I tell people that MSE/Windows defender and Malwarebytes is enough to get you along.  I still stick to that, even in this topic.  What @Munawar said, however, was not out of place in this topic, because if you have the option to have more security on your PC, why not have it?  Would you not rather be safe than sorry?
And by the way, I'm not one of those people who runs dropbox and btsync folders willy nillly.  If that is you, as far as I'm concerned, you deserve to be infected; you're basically asking for it.
Getting back to the house analogy for just a second?  I don't currently own a house.  My wife asks me to check the door every single freaking night.  In my mind, the absolute question is always, if the door and its lock status mean so offal much to you why don't you take the time to check it yourself?  I never ask her that question.  Why?  Because security falls to me and she has left it that way since the day we got married.  If anything happens to breach that security?  I'm responsible.  I know that I locked the door when I came through it to enter the house.  I also happen to know that it'll help her feel safer if I go and check it... Just, in, case.  No... I know it's not necessary, but would I forgive myself entirely if I knew there was even a slightest chance in blazes that the door was unlocked and I slept right through the kids being kidnapped or anything else of the sort?
I think of UAC kind of like that in some senses.  I can tell UAC not to alert me as much as all that if UAC is really annoying me, or I can tell it to shut up entirely, but once I tell it to shut up entirely, I cannot blame MS for not trying to help me stay safe.  In the same way, I could honestly tell my wife not to nag me about checking the door, but if she doesn't remind me and it falls upon me to make that responsibility entirely my own and I should chance to forget?  I'm stupid!

When life gives you oranges, demand lemons since everyone else is obviously getting them.

2020-02-24 20:47:14

A locked door and antivirous is both good things to have but UAC for me isn't. You're not 100% safe with UAC either even the sound of it UAC, sounds contagious. Doctor doctor help me I got a serious case of UAC. lol

Kingdom of Loathing name JB77

2020-02-24 22:32:11

@29, thumbs up man. Great post right there.

"On two occasions I have been asked [by members of Parliament!]: 'Pray, Mr. Babbage, if you put into the machine wrong figures, will the right answers come out ?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question."    — Charles Babbage.
My Github

2020-02-25 07:18:22

@29 You said it better than I could ever.

2020-02-25 08:10:49

for the record: you don't just "download a virus" and then you have it. it actually has to trick you into running it.

2020-02-25 08:17:36

I woulnd't got aht far

Ivan M. Soto.
Feel free to check out my work and services.
http://ims-productions.com

2020-02-25 13:04:08

Nikola, since you seem to have entirely missed my point, I'm going to provide you with a small example I did to someone's computer a few months ago to teach them something.
So, I made a little game. Nothing fancy, just a guess the number thing. I then added a little function in said game to download a file containing my little virus from my website to this person's app data so they wouldn't see it. This file was then ran, and wala. Since this person didn't have UAC enabled, I had full control of there system just like that. Think about that for a second. If I didn't show this person what I'd done there's no way they could have known. They had no anti virus, no windows defender to protect them, nothing. I could have done all kinds of things. This is why you always, always need some kind of security in place.

2020-02-25 13:22:01

This is why i think people are stupid when they disable windows defender and don't have any antivirus running.

2020-02-25 14:06:06

Right after this poster posted this topic i just got this virus, damn! i allmost can't believe it, but it was a perfect timing so i knew what to do. At first it didn't do anything harmfull but then my windows defender freeked out.
i removed it with the remover thing but windows defender is still showing it but i can't see it anywhere and it didn't infected anything. what should i do to delete that thing from win defender?

2020-02-25 14:52:57

Well Haily, your example worked because the person trusted your software, not because they had UAC off. You could have achieved the same with UAC on by saying sorry, my game requires administrator rights to download and register a library, I'll fix that soon but you can grant it for now. UAC is so silly that the majority who has it on don't even realize what it does and what does it mean running a program elevated. I'm not talking about the majority of this forum, but computer users.  You can't say they got a virus because UAC was off. No they didn't, they got it because they had no protection on their system. So hopefully that addresses your point better. Again, if you choose to keep it on, nothing wrong, but equal is for those who choose to have it off. It won't cause people to get a virus, nor are they stupid.

2020-02-25 16:42:41

It's rather hilarious how some of us are worshipping UAC, but I have to agree with Nidza and others about this one. Regardless of whether UAC is on or off, there isn't much difference. When you run a program with UAC off, you're automatically saying "yes, I'd like to install this." UAC is only meant to confirm whether you'd like to proceed with an installation and isn't meant to be for security, because it never even tells you if a program makes changes to your computer. When you say yes to UAC, you're allowing the program to do whatever it needs to do, and it likely won't ask again after that unless there is, say, an update.
Our family desktop actually came with two antivirus protecters, Defender and MalwareBytes, and they take care of what they need to take care of. I can see people excluding folders from Windows Defender, but disabling it entirely? I'll pass.

-----
YouTube
GitHub
Discord: @tunmi13#1880

2020-02-25 17:20:22

nidza07, again you're missing the point. If you hear about a new game that's been released, chances are you'll download and run it without thinking if it's something that appeals to you. Your example of saying the game requires elevation to work would be invalid here because A, no game should ever, ever have to do that, and if it does there's a serious problem, and B, if the game downloaded something and that was what was requesting elevation, specially if it did so when the game in question wasn't running, that could seriously save your ass. If you have UAC disabled you're basically saying okay, anything I can run can now have the power to do anything with my system.

2020-02-25 17:28:30

It'd ask if you wanted to the app to make changes though, it wouldn't be like "oh by the way, this app downloded this file."
It's like this. If you get a bacon cheeseburger, and you know that it is a cheeseburger, someone isn't going to just say it has barbecue on it unless they can see it. They'd have to physically open up your burger to check.

-----
YouTube
GitHub
Discord: @tunmi13#1880

2020-02-25 19:38:16 (edited by Ethin 2020-02-25 19:39:19)

@41, that's not the point 40 is trying to make. I don't really get how this is hard to understand.
If you have UAC off and a game downloads a file that requires elevation and runs it, you'll never even know its running at all. There'll be no warning at all, no way for you to even realize its there with full administrative privileges. If that very same game did tha and you had UAC on, you'd at least be notified that something wants to make changes to your computer. You know what precisely wants to make changes by reading the information UAC prompts you with and using show details if you need that to find out more information. Its not meant to protect you against viruses or malicious programs, per see; its there to tell you "hey, this app wants to run with admin privileges to do something, and you probably should know its happening." UAC also doesn't just prompt you when your installing something either, it prompts you when any application requests elevation for any reason (especially if you've got it at its highest setting).
@33, not really sure where you get this logic. Right now this statement is entirely false. It may be true in a few years but for now its not. Its trivial for me to make a program that downloads a virus and runs it with non-elevated privileges that starts deleting all your documents and other files without you explicitly needing to download the virus. You simply need to download a program that can then download the virus for you. Adn that's only the tip of the icebirg; ther ar many, many ways of contracting computer viruses that we haven't even touched on that don't involve you downloading any kind of downloader.

"On two occasions I have been asked [by members of Parliament!]: 'Pray, Mr. Babbage, if you put into the machine wrong figures, will the right answers come out ?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question."    — Charles Babbage.
My Github

2020-02-25 19:43:21

Exactly. Don't even get me started on the fact that a process can still request elevation even after being ran, so any game or piece of software could do absolutely anything to your system at any point during it's run time.

2020-02-25 20:57:23

I'm sorry Haily, but the argument of no game requires elevation and should never do it is false. Here's why. Note, I do realize this example is not a game, but it is something you have to do to play a game. Aprone's games are in VB6. To run them, you have to register the appropriate libraries. Here's the fun part though. most people won't be doing that manually and will run his very useful checkup utility. Guess what though? That requires elevation for obvious reasons. You trust Aprone, and you will say yes by default no matter what your dear UAC tells you. Guess what? That file can download a virus and do whatever once you give it elevation. Where's the security there if you will press yes by default on trusted apps? Doesn't exist. Games on their own do not require elevation indeed, even though some  older games like old BSC software does, but modern apps of course don't  do that.  So yeah, can't see why that's useful. Let's say hypothetically you run a file called BestGameSetup.exe. This file will of course require elevation before it can install  anything into the program files  folder. At that point, you already said yes. It's done, it can install whatever. If you say no, you can't play the game. So it's not like it tells you hey, this file requires elevation to copy X to Y folder and delete Z N and C. It only asks whether you will allow it or not and does not give you the reason of that question. If it did, it could be an actual security tool. Right now I can only view it as a utility to protect your main administrator account from unwanted software installs provided other people use your PC. The fact it tells me that a program Y is requesting elevation is useless. I already know what I ran, rather I'd be curious why it requires that. So that's my view on why I prefer it off, just one annoying notification with no real purpose.

2020-02-25 23:20:05

No, your screen reader doesn't run in elevated mode. I run both JAWS and NVDA on a standard user account. And they run fine; they've never explicitly asked for admin rights. If I need to read an install dialog or something like that that was created by an application with admin rights, neither NVDA nor JAWS will read it properly unless I run an elevated copy of either screen reader. For this purpose, I have admin shortcuts of both screen readers that elevate the respective screen readers to admin by explicitly asking for my admin password.

2020-02-25 23:20:36

Alright!  So if you want it off, keep it off!  I'm not sure what all the fuss is.  We're saying it does what it's meant to and that it adds an extra layer of security by virtue of what it does, which is to tell you that something is requesting permission to do something you may or may not otherwise be aware of and that the app requesting it probably shouldn't be.  For the average user, this may be a good thing.  While I was running win7  I had UAC off myself.  I left it on on this machine which runs win 10 for two reasons I will outline below:
1.  It's doing me no harm to have it on.
2.  It allows me to only have to manage one account and see what wants to run under administrative rights without me having to assume everything wants to run under administrative rights.  I can go about my day until I see that simple little dialogue and then choose to wonder, or not wonder, why that dialogue popped up, as not everything on an admin account runs with admin rights by default.  Yes, it's up to me to say yes or no.  Yes, it's up to me to exercise common sense, but I was given at least one more chance to do precisely that, where as by keeping it off I disabled that last chance.
But UAC takes it a step further.  Supposing I wanted to run a local account to protect my computer entirely, without ever having to run my admin account.  Why do I say entirely?  Because under a local account, UAC will never allow programs to write to the program files directory or any other directory critical to windows, instead creating a virtual sandbox that fools programs into thinking they are writing to places they wish to write to, even though they in fact aren't.
The fact is that by disabling UAC what you are essentially saying is that coders do not need to rethink their applications because you're just going to allow them to do whatever they want on your system with admin rights.  I'm sorry, but not everything should have to run under elevated privileges, and if it does have to, there should be a very legitimate reason as to why.
Have you ever heard about process elevation strategies?  Did you know that practically every flavor of linux and OSX have them injected.  Why should UAC be any different?  Do you know what sudo is?  did you know that UAC was designed to practically resemble it?  If you can answer all of those questions intelligently I invite you to do so, then tell me why those options are viable on other systems but do not work for you on windows, where the percentage of chances of you getting hacked are much higher by the simple virtue that most everyone and their grandmother's pekingese uses windows.

When life gives you oranges, demand lemons since everyone else is obviously getting them.

2020-02-26 00:22:46 (edited by Ethin 2020-02-26 00:26:07)

46, yep, I keep UAC on for the exact same reasons. Disabling UAC on Windows is akin to making sudo not ask for a password on Linux and Unix systems. The only difference is that sudo doesn't tell you what requires elevation (it implicitly trusts that you know what's doing it), but you can check the logs for precisely (1) the command/user that requires root privileges and (2) the exact command that process wanted to run. Hell, with the right setup you can record entire sudo sessions! Run sudo -s or sudo su -? Yep, you'll be monitored the hole time and any admin of the machine can go "OK, this guy edited /etc/fstab at 2:30 PM".
Windows provides those exact same features -- just under a different name, and its not UAC. Windows calls it "object auditing" or something like that under group policy. But UAC provides you a bit of info right off the bat that Sudo requires you to go digging through logs to find -- what, exactly, is wanting elevation? What's its origin? Who's the publisher? And those tidbits of info on their own are entirely useless, but if you know the app that's requesting elevation and you know -- for certain -- that it doesn't need elevation, that information just might be a lot more useful. The app that wants elevation might have the same name but might be somewhere you didn't expect, for instance. The publisher might be wrong (especially if the app is signed). Little tidbits of information can cumulatively be damning but individually be useless; that's the first part of the security mindset that anyone needs to adopt when becoming security-conscious, because your going to see a lot of "useless" information that cumulatively can tell a very fascinating story.

"On two occasions I have been asked [by members of Parliament!]: 'Pray, Mr. Babbage, if you put into the machine wrong figures, will the right answers come out ?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question."    — Charles Babbage.
My Github

2020-02-26 07:29:42

@47 is right, I just today set my UAC levels to the Max settings so I don't mess up my computer by accedent. I one day would like to switch to Linux full time but, their is a lot of work to be done before that can happen for me.

2020-02-26 15:53:13

I too wouldn't mind switching to linux or at least learning more than I currently know for the sake of use, benefit and versatility, but methinks I'm just too old, unless one of you youngbloods are willing to sit down with a crusty beat up 32 year old dad for a few solid weeks, and that's where the problems begin.  I need to get all these kids off to school first...

When life gives you oranges, demand lemons since everyone else is obviously getting them.

2020-02-28 01:10:33

You know what amazes me about so many here saying UAC is annoying and refusing to run as standard user...

These same people will turn around and complain that Windows is insecure because Microsoft can't get their act together. As @46 said, UAC is akin to sudo on Linux and no one's complaining about that (in fact, it's one of the reasons Linux is generally seen as more secure than Windows.) If you run as root on Linux it won't take long for people on forums to laugh at you.

But this culture that we have in Windows doesn't help security at all. Microsoft gives us standard user accounts...we all run admin accounts. Microsoft gives us UAC...we all turn it off. Then we say Microsoft needs to secure their OS. It's something that's never made sense to me about Windows users. If you don't want to deal with UAC, at least run a standard user account. But the amount of people who aren't even aware that standard accounts exist on Windows blows my mind.