• Total Members: 12780
  • Latest: eduard
  • Total Posts: 28046
  • Total Topics: 8053
  • Online Today: 962
  • Online Ever: 51419
  • (01. January 2010., 09:27:49)

Author Topic: January's Windows 7 hole still open (remotely switch UAC)  (Read 1246 times)

0 Members and 1 Guest are viewing this topic.


  • SCF Administrator
  • *****
  • Posts: 7152
  • KARMA: 291
  • Gender: Male
  • Whatever doesn't kill us makes us stronger.
    • - Samker's Computer Forum

A security hole in Windows 7, highlighted by a blogger back in January, is still wide open and Microsoft is showing very little interest in closing it.

Of course the software is only in beta right now, but the full release is due in August.

An Aussie blogger spotted the problem with User Account Control back in January.

UAC is meant to guard against malware - it warns users when applications try to make changes to the computer. But 21-year old Long Zheng created proof of concept code which can remotely switch UAC off without informing the user.

He was told at the time by Microsoft that the bug was not a bug, but was instead there by design. It will therefore not be fixed.

Long Zheng has now posted a video on his popular blog to try and explain why he feels this is a serious security hole which needs fixing before the August launch.

He said he was releasing the code because Microsoft has known about this for over a year and: "If Microsoft is right in saying this has no security implications, then this should mean nothing. If they are not then, well, at least there is still time to do something about it. A month to be exact."

The blog post and video are here:

(The Register)

Samker's Computer Forum -


With Quick-Reply you can write a post when viewing a topic without loading a new page. You can still use bulletin board code and smileys as you would in a normal post.

Name: Email:
Type the letters shown in the picture
Listen to the letters / Request another image
Type the letters shown in the picture:
Second Anti-Bot trap, type or simply copy-paste below (only the red letters)

Enter your email address to receive daily email with ' - Samker's Computer Forum' newest content:

Terms of Use | Privacy Policy | Advertising