Is SRP necessary or even useful, with Vista/Win7 because of UAC?

[VirtualLarry]

Is there any benefit to white/black list applications on Vista or Windows 7, if apps that make system-wide changes always prompt you to confirm?

Does Vista even support SRP? What editions?

 

[bsobel]

Originally posted by: VirtualLarry
Is there any benefit to white/black list applications on Vista or Windows 7, if apps that make system-wide changes always prompt you to confirm?

Does Vista even support SRP? What editions?

Of course there are benefits. Many firms control extactly what can be run for security as well as licensing reasons...

 

[mechBgon]

Originally posted by: VirtualLarry
Is there any benefit to white/black list applications on Vista or Windows 7, if apps that make system-wide changes always prompt you to confirm?

Does Vista even support SRP? What editions?

Vista Business, Ultimate and Enterprise support SRP. And since you've read my SRP page, I know you've seen several examples of why unauthorized software running at low-rights level still could be dangerous. For example, it could encrypt stuff the user has access to, and hold it for ransom, as the GPCode malware does.

 

[VirtualLarry]

Originally posted by: mechBgon
I know you've seen several examples of why unauthorized software running at low-rights level still could be dangerous. For example, it could encrypt stuff the user has access to, and hold it for ransom, as the GPCode malware does.

Hmm, never thought of that. Another possibility is phone-home malware, that copies all of your documents off to somewhere on the internet.

 

[VinDSL]

Great topic, boys! Thanks!

Bump...

 

[VirtualLarry]

more comments?