Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. Did You Guys Hear...

Did You Guys Hear...

Scheduled Pinned Locked Moved The Lounge
securityquestion
60 Posts 31 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • G gaurav_scr

    One of the software that I often use does ask for admin rights even if the words "Install" or "Setup" are not present in its name. Name of the executable is "daemon408-139-x64.exe"

    R Offline
    R Offline
    realJSOP
    wrote on last edited by
    #6

    Well, depending on what it does inside, it might still require admin rights. I'm talking about normal programs here. If you name them in such a way as to trigger this security feature, they will require admin rights to run even if they shouldn't otherwise require such rights.

    "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
    -----
    "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

    G 1 Reply Last reply
    0
    • N NormDroid

      Let me give you a clue, d-a-e-m-o-n (aka Service).

      .net is a box of never ending treasures, every day I get find another gem.

      G Offline
      G Offline
      gaurav_scr
      wrote on last edited by
      #7

      OOPS.:-O

      1 Reply Last reply
      0
      • N NormDroid

        I thought we'd had April Fools :~

        .net is a box of never ending treasures, every day I get find another gem.

        R Offline
        R Offline
        realJSOP
        wrote on last edited by
        #8

        I'm not kidding. MS admitted to it.

        "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
        -----
        "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

        P N 2 Replies Last reply
        0
        • C Christian Graus

          This is a joke, right ? I thought most installers were msi files nowadays anyhow ? But, either way, that's just pathetic.

          Christian Graus - Microsoft MVP - C++ Metal Musings - Rex and my new metal blog "I am working on a project that will convert a FORTRAN code to corresponding C++ code.I am not aware of FORTRAN syntax" ( spotted in the C++/CLI forum )

          R Offline
          R Offline
          realJSOP
          wrote on last edited by
          #9

          Nope, not a joke. It is however an absurd security measure.

          "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
          -----
          "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

          1 Reply Last reply
          0
          • R realJSOP

            I'm not kidding. MS admitted to it.

            "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
            -----
            "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

            P Offline
            P Offline
            Pete OHanlon
            wrote on last edited by
            #10

            Link please.

            Deja View - the feeling that you've seen this post before.

            S 1 Reply Last reply
            0
            • R realJSOP

              I'm not kidding. MS admitted to it.

              "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
              -----
              "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

              N Offline
              N Offline
              NormDroid
              wrote on last edited by
              #11

              Well obviously the recruiting grade has gone down hill, as mini-msft often states. So they've actually annouced this fact begs believe.:wtf:

              .net is a box of never ending treasures, every day I get find another gem.

              1 Reply Last reply
              0
              • R realJSOP

                Well, depending on what it does inside, it might still require admin rights. I'm talking about normal programs here. If you name them in such a way as to trigger this security feature, they will require admin rights to run even if they shouldn't otherwise require such rights.

                "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                -----
                "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                G Offline
                G Offline
                gaurav_scr
                wrote on last edited by
                #12

                Do you mean if I rename a normal exe file to install.exe then it will ask for admin rights to start?

                R 1 Reply Last reply
                0
                • R realJSOP

                  ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

                  "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                  -----
                  "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                  D Offline
                  D Offline
                  Dario Solera
                  wrote on last edited by
                  #13

                  I couldn't believe, so I tried to rename an EXE file to Setup.exe or Install.exe. It's true. :|

                  ________________________________________________ Personal Blog [ITA] - Tech Blog [ENG] - My Photos ScrewTurn Wiki 2.0.4

                  M 1 Reply Last reply
                  0
                  • D Dario Solera

                    I couldn't believe, so I tried to rename an EXE file to Setup.exe or Install.exe. It's true. :|

                    ________________________________________________ Personal Blog [ITA] - Tech Blog [ENG] - My Photos ScrewTurn Wiki 2.0.4

                    M Offline
                    M Offline
                    Maximilien
                    wrote on last edited by
                    #14

                    so there's a huge strcmp in the code ?!?%!%


                    Maximilien Lincourt Your Head A Splode - Strong Bad

                    P 1 Reply Last reply
                    0
                    • R realJSOP

                      ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

                      "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                      -----
                      "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                      G Offline
                      G Offline
                      gvisgr8
                      wrote on last edited by
                      #15

                      are you sure.......:wtf: i knew MS is not that smart in security but this stupid method for preventing malware .......is juz too much.... X| X| :wtf::omg::wtf:.

                      1 Reply Last reply
                      0
                      • R realJSOP

                        ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

                        "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                        -----
                        "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                        R Offline
                        R Offline
                        Rajesh R Subramanian
                        wrote on last edited by
                        #16

                        John Simmons / outlaw programmer wrote:

                        If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run.

                        Microsoft: "Boffo" added to the list :cool: Now anything with "boffo" in its name will require admin priveleges!

                        found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

                        P J M 3 Replies Last reply
                        0
                        • M Maximilien

                          so there's a huge strcmp in the code ?!?%!%


                          Maximilien Lincourt Your Head A Splode - Strong Bad

                          P Offline
                          P Offline
                          prasad_som
                          wrote on last edited by
                          #17

                          Maximilien wrote:

                          so there's a huge strcmp in the code

                          strstr, probably. :)


                          Prasad MS MVP -  VC++

                          R 1 Reply Last reply
                          0
                          • R Rajesh R Subramanian

                            John Simmons / outlaw programmer wrote:

                            If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run.

                            Microsoft: "Boffo" added to the list :cool: Now anything with "boffo" in its name will require admin priveleges!

                            found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

                            P Offline
                            P Offline
                            prasad_som
                            wrote on last edited by
                            #18

                            :laugh:


                            Prasad MS MVP -  VC++

                            1 Reply Last reply
                            0
                            • P prasad_som

                              Maximilien wrote:

                              so there's a huge strcmp in the code

                              strstr, probably. :)


                              Prasad MS MVP -  VC++

                              R Offline
                              R Offline
                              Rajesh R Subramanian
                              wrote on last edited by
                              #19

                              No programming discussion in the lounge :p

                              found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

                              P 1 Reply Last reply
                              0
                              • R realJSOP

                                ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

                                "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                                -----
                                "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                                H Offline
                                H Offline
                                hairy_hats
                                wrote on last edited by
                                #20

                                This works in XP too - try making a copy of notepad.exe and call it install.exe. :rolleyes:

                                N L V 3 Replies Last reply
                                0
                                • N NormDroid

                                  I thought we'd had April Fools :~

                                  .net is a box of never ending treasures, every day I get find another gem.

                                  J Offline
                                  J Offline
                                  JimmyRopes
                                  wrote on last edited by
                                  #21

                                  Every day is April 1st for the Redmond security team. X| They have come out with some real winners. :rolleyes:

                                  Simply Elegant Designs JimmyRopes Designs
                                  Think inside the box! ProActive Secure Systems
                                  I'm on-line therefore I am. JimmyRopes

                                  1 Reply Last reply
                                  0
                                  • R realJSOP

                                    ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

                                    "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                                    -----
                                    "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                                    D Offline
                                    D Offline
                                    Duncan Edwards Jones
                                    wrote on last edited by
                                    #22

                                    But then, what would be a sensible alternative? I thought maybe parsing the imports table for harmful API calls,...but then you'd have to do a whole lot of work going down through the entire imports tree.

                                    '--8<------------------------ Ex Datis: Duncan Jones Merrion Computing Ltd

                                    1 Reply Last reply
                                    0
                                    • H hairy_hats

                                      This works in XP too - try making a copy of notepad.exe and call it install.exe. :rolleyes:

                                      N Offline
                                      N Offline
                                      NormDroid
                                      wrote on last edited by
                                      #23

                                      So this isn't something new?

                                      .net is a box of never ending treasures, every day I get find another gem.

                                      J D 2 Replies Last reply
                                      0
                                      • R Rajesh R Subramanian

                                        John Simmons / outlaw programmer wrote:

                                        If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run.

                                        Microsoft: "Boffo" added to the list :cool: Now anything with "boffo" in its name will require admin priveleges!

                                        found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

                                        J Offline
                                        J Offline
                                        JimmyRopes
                                        wrote on last edited by
                                        #24

                                        brahmma wrote:

                                        Now anything with "boffo" in its name will require admin priveleges!

                                        Yes but it won't come out until the next operating system is released! :~ Boffo is safe for a few years at least. :laugh:

                                        Simply Elegant Designs JimmyRopes Designs
                                        Think inside the box! ProActive Secure Systems
                                        I'm on-line therefore I am. JimmyRopes

                                        1 Reply Last reply
                                        0
                                        • N NormDroid

                                          So this isn't something new?

                                          .net is a box of never ending treasures, every day I get find another gem.

                                          J Offline
                                          J Offline
                                          JimmyRopes
                                          wrote on last edited by
                                          #25

                                          norm .net wrote:

                                          So this isn't something new?

                                          So you believed the marketing hype that Vista was rewritten from the ground up to make it more secure. :rolleyes:

                                          Simply Elegant Designs JimmyRopes Designs
                                          Think inside the box! ProActive Secure Systems
                                          I'm on-line therefore I am. JimmyRopes

                                          1 Reply Last reply
                                          0
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Don't have an account? Register

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups