Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. Did You Guys Hear...

Did You Guys Hear...

Scheduled Pinned Locked Moved The Lounge
securityquestion
60 Posts 31 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • C Christian Graus

    This is a joke, right ? I thought most installers were msi files nowadays anyhow ? But, either way, that's just pathetic.

    Christian Graus - Microsoft MVP - C++ Metal Musings - Rex and my new metal blog "I am working on a project that will convert a FORTRAN code to corresponding C++ code.I am not aware of FORTRAN syntax" ( spotted in the C++/CLI forum )

    R Offline
    R Offline
    realJSOP
    wrote on last edited by
    #9

    Nope, not a joke. It is however an absurd security measure.

    "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
    -----
    "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

    1 Reply Last reply
    0
    • R realJSOP

      I'm not kidding. MS admitted to it.

      "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
      -----
      "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

      P Offline
      P Offline
      Pete OHanlon
      wrote on last edited by
      #10

      Link please.

      Deja View - the feeling that you've seen this post before.

      S 1 Reply Last reply
      0
      • R realJSOP

        Well, depending on what it does inside, it might still require admin rights. I'm talking about normal programs here. If you name them in such a way as to trigger this security feature, they will require admin rights to run even if they shouldn't otherwise require such rights.

        "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
        -----
        "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

        G Offline
        G Offline
        gaurav_scr
        wrote on last edited by
        #11

        Do you mean if I rename a normal exe file to install.exe then it will ask for admin rights to start?

        R 1 Reply Last reply
        0
        • R realJSOP

          I'm not kidding. MS admitted to it.

          "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
          -----
          "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

          N Offline
          N Offline
          NormDroid
          wrote on last edited by
          #12

          Well obviously the recruiting grade has gone down hill, as mini-msft often states. So they've actually annouced this fact begs believe.:wtf:

          .net is a box of never ending treasures, every day I get find another gem.

          1 Reply Last reply
          0
          • R realJSOP

            ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

            "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
            -----
            "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

            D Offline
            D Offline
            Dario Solera
            wrote on last edited by
            #13

            I couldn't believe, so I tried to rename an EXE file to Setup.exe or Install.exe. It's true. :|

            ________________________________________________ Personal Blog [ITA] - Tech Blog [ENG] - My Photos ScrewTurn Wiki 2.0.4

            M 1 Reply Last reply
            0
            • D Dario Solera

              I couldn't believe, so I tried to rename an EXE file to Setup.exe or Install.exe. It's true. :|

              ________________________________________________ Personal Blog [ITA] - Tech Blog [ENG] - My Photos ScrewTurn Wiki 2.0.4

              M Offline
              M Offline
              Maximilien
              wrote on last edited by
              #14

              so there's a huge strcmp in the code ?!?%!%


              Maximilien Lincourt Your Head A Splode - Strong Bad

              P 1 Reply Last reply
              0
              • R realJSOP

                ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

                "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                -----
                "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                G Offline
                G Offline
                gvisgr8
                wrote on last edited by
                #15

                are you sure.......:wtf: i knew MS is not that smart in security but this stupid method for preventing malware .......is juz too much.... X| X| :wtf::omg::wtf:.

                1 Reply Last reply
                0
                • M Maximilien

                  so there's a huge strcmp in the code ?!?%!%


                  Maximilien Lincourt Your Head A Splode - Strong Bad

                  P Offline
                  P Offline
                  prasad_som
                  wrote on last edited by
                  #16

                  Maximilien wrote:

                  so there's a huge strcmp in the code

                  strstr, probably. :)


                  Prasad MS MVP -  VC++

                  R 1 Reply Last reply
                  0
                  • R realJSOP

                    ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

                    "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                    -----
                    "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                    R Offline
                    R Offline
                    Rajesh R Subramanian
                    wrote on last edited by
                    #17

                    John Simmons / outlaw programmer wrote:

                    If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run.

                    Microsoft: "Boffo" added to the list :cool: Now anything with "boffo" in its name will require admin priveleges!

                    found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

                    P J M 3 Replies Last reply
                    0
                    • R Rajesh R Subramanian

                      John Simmons / outlaw programmer wrote:

                      If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run.

                      Microsoft: "Boffo" added to the list :cool: Now anything with "boffo" in its name will require admin priveleges!

                      found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

                      P Offline
                      P Offline
                      prasad_som
                      wrote on last edited by
                      #18

                      :laugh:


                      Prasad MS MVP -  VC++

                      1 Reply Last reply
                      0
                      • P prasad_som

                        Maximilien wrote:

                        so there's a huge strcmp in the code

                        strstr, probably. :)


                        Prasad MS MVP -  VC++

                        R Offline
                        R Offline
                        Rajesh R Subramanian
                        wrote on last edited by
                        #19

                        No programming discussion in the lounge :p

                        found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

                        P 1 Reply Last reply
                        0
                        • R realJSOP

                          ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

                          "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                          -----
                          "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                          H Offline
                          H Offline
                          hairy_hats
                          wrote on last edited by
                          #20

                          This works in XP too - try making a copy of notepad.exe and call it install.exe. :rolleyes:

                          N L V 3 Replies Last reply
                          0
                          • N NormDroid

                            I thought we'd had April Fools :~

                            .net is a box of never ending treasures, every day I get find another gem.

                            J Offline
                            J Offline
                            JimmyRopes
                            wrote on last edited by
                            #21

                            Every day is April 1st for the Redmond security team. X| They have come out with some real winners. :rolleyes:

                            Simply Elegant Designs JimmyRopes Designs
                            Think inside the box! ProActive Secure Systems
                            I'm on-line therefore I am. JimmyRopes

                            1 Reply Last reply
                            0
                            • R realJSOP

                              ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

                              "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                              -----
                              "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                              D Offline
                              D Offline
                              Duncan Edwards Jones
                              wrote on last edited by
                              #22

                              But then, what would be a sensible alternative? I thought maybe parsing the imports table for harmful API calls,...but then you'd have to do a whole lot of work going down through the entire imports tree.

                              '--8<------------------------ Ex Datis: Duncan Jones Merrion Computing Ltd

                              1 Reply Last reply
                              0
                              • H hairy_hats

                                This works in XP too - try making a copy of notepad.exe and call it install.exe. :rolleyes:

                                N Offline
                                N Offline
                                NormDroid
                                wrote on last edited by
                                #23

                                So this isn't something new?

                                .net is a box of never ending treasures, every day I get find another gem.

                                J D 2 Replies Last reply
                                0
                                • R Rajesh R Subramanian

                                  John Simmons / outlaw programmer wrote:

                                  If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run.

                                  Microsoft: "Boffo" added to the list :cool: Now anything with "boffo" in its name will require admin priveleges!

                                  found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

                                  J Offline
                                  J Offline
                                  JimmyRopes
                                  wrote on last edited by
                                  #24

                                  brahmma wrote:

                                  Now anything with "boffo" in its name will require admin priveleges!

                                  Yes but it won't come out until the next operating system is released! :~ Boffo is safe for a few years at least. :laugh:

                                  Simply Elegant Designs JimmyRopes Designs
                                  Think inside the box! ProActive Secure Systems
                                  I'm on-line therefore I am. JimmyRopes

                                  1 Reply Last reply
                                  0
                                  • N NormDroid

                                    So this isn't something new?

                                    .net is a box of never ending treasures, every day I get find another gem.

                                    J Offline
                                    J Offline
                                    JimmyRopes
                                    wrote on last edited by
                                    #25

                                    norm .net wrote:

                                    So this isn't something new?

                                    So you believed the marketing hype that Vista was rewritten from the ground up to make it more secure. :rolleyes:

                                    Simply Elegant Designs JimmyRopes Designs
                                    Think inside the box! ProActive Secure Systems
                                    I'm on-line therefore I am. JimmyRopes

                                    1 Reply Last reply
                                    0
                                    • R Rajesh R Subramanian

                                      No programming discussion in the lounge :p

                                      found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

                                      P Offline
                                      P Offline
                                      prasad_som
                                      wrote on last edited by
                                      #26

                                      Oops !


                                      Prasad MS MVP -  VC++

                                      1 Reply Last reply
                                      0
                                      • N NormDroid

                                        So this isn't something new?

                                        .net is a box of never ending treasures, every day I get find another gem.

                                        D Offline
                                        D Offline
                                        David Crow
                                        wrote on last edited by
                                        #27

                                        norm .net wrote:

                                        So this isn't something new?

                                        No, XP employs the same "feature"


                                        "A good athlete is the result of a good and worthy opponent." - David Crow

                                        "To have a respect for ourselves guides our morals; to have deference for others governs our manners." - Laurence Sterne

                                        1 Reply Last reply
                                        0
                                        • G gaurav_scr

                                          Do you mean if I rename a normal exe file to install.exe then it will ask for admin rights to start?

                                          R Offline
                                          R Offline
                                          realJSOP
                                          wrote on last edited by
                                          #28

                                          According to what I've read, yes.

                                          "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                                          -----
                                          "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                                          1 Reply Last reply
                                          0
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Don't have an account? Register

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups