Originally posted by: stash
These are bugs. There are things that should not prompt for consent, deleting an item from the desktop being an obvious one. The UAC team is very interested in getting feedback on these issues. Please file bugs.
A bug is a crash, memory leak, BSOD, unstable, non-working feature etc. It asking me for consent for silly things is a design flaw - both need similar attention, and I have indeed given my feedback to them about it, but I wouldn't call it a bug, just overprotective design.
There's no UAC prompt for changing the resolution.
I'm not on vista right now, just using that as a typical example of the inane things UAC wasn't assurance I REALLY want to do - deleting an item from the desktop is an even better example.
It might not do you any good, until the next Sony rootkit comes along. It will be on by default at RTM.
I've been using PCs for years, and I've never had a SERIOUS problem with malware, because I know what not to do, and no one uses my PC but me. I understand this isn't the case for most people, and I think it's a step in the right direction, but they stepped way too far, I think even for the average non-literate user. They are going to be bombarded by dialogs for silly things, and possibly think theyre doing something wrong. It's a case of crying wolf - it keeps nagging for such little things, when something serious happens, they'll have long learned to ignore the dialog.
LOL, this is a basic change?! How do you determine if an action is being taken by a user or by a program? How can you tell if what you think is a user making a change is not malware spoofing this action? That is not a trivial problem to solve at all.
How about monitoring mouse/keyboard input, for starters? If a firewall can tell whether or not I requested something, or a popup blocker can figure out whether I asked for that window to pop-up, why is this so hard to do? It doesn't have to be perfect.
Again, how do you make the distinction between malware doing something it shouldn't and a user doing something they shouldn't?
See above.