Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. Did You Guys Hear...

Did You Guys Hear...

Scheduled Pinned Locked Moved The Lounge
securityquestion
60 Posts 31 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • realJSOPR realJSOP

    Well, depending on what it does inside, it might still require admin rights. I'm talking about normal programs here. If you name them in such a way as to trigger this security feature, they will require admin rights to run even if they shouldn't otherwise require such rights.

    "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
    -----
    "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

    G Offline
    G Offline
    gaurav_scr
    wrote on last edited by
    #12

    Do you mean if I rename a normal exe file to install.exe then it will ask for admin rights to start?

    realJSOPR 1 Reply Last reply
    0
    • realJSOPR realJSOP

      ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

      "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
      -----
      "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

      D Offline
      D Offline
      Dario Solera
      wrote on last edited by
      #13

      I couldn't believe, so I tried to rename an EXE file to Setup.exe or Install.exe. It's true. :|

      ________________________________________________ Personal Blog [ITA] - Tech Blog [ENG] - My Photos ScrewTurn Wiki 2.0.4

      M 1 Reply Last reply
      0
      • D Dario Solera

        I couldn't believe, so I tried to rename an EXE file to Setup.exe or Install.exe. It's true. :|

        ________________________________________________ Personal Blog [ITA] - Tech Blog [ENG] - My Photos ScrewTurn Wiki 2.0.4

        M Offline
        M Offline
        Maximilien
        wrote on last edited by
        #14

        so there's a huge strcmp in the code ?!?%!%


        Maximilien Lincourt Your Head A Splode - Strong Bad

        P 1 Reply Last reply
        0
        • realJSOPR realJSOP

          ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

          "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
          -----
          "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

          G Offline
          G Offline
          gvisgr8
          wrote on last edited by
          #15

          are you sure.......:wtf: i knew MS is not that smart in security but this stupid method for preventing malware .......is juz too much.... X| X| :wtf::omg::wtf:.

          1 Reply Last reply
          0
          • realJSOPR realJSOP

            ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

            "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
            -----
            "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

            R Offline
            R Offline
            Rajesh R Subramanian
            wrote on last edited by
            #16

            John Simmons / outlaw programmer wrote:

            If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run.

            Microsoft: "Boffo" added to the list :cool: Now anything with "boffo" in its name will require admin priveleges!

            found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

            P J M 3 Replies Last reply
            0
            • M Maximilien

              so there's a huge strcmp in the code ?!?%!%


              Maximilien Lincourt Your Head A Splode - Strong Bad

              P Offline
              P Offline
              prasad_som
              wrote on last edited by
              #17

              Maximilien wrote:

              so there's a huge strcmp in the code

              strstr, probably. :)


              Prasad MS MVP -  VC++

              R 1 Reply Last reply
              0
              • R Rajesh R Subramanian

                John Simmons / outlaw programmer wrote:

                If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run.

                Microsoft: "Boffo" added to the list :cool: Now anything with "boffo" in its name will require admin priveleges!

                found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

                P Offline
                P Offline
                prasad_som
                wrote on last edited by
                #18

                :laugh:


                Prasad MS MVP -  VC++

                1 Reply Last reply
                0
                • P prasad_som

                  Maximilien wrote:

                  so there's a huge strcmp in the code

                  strstr, probably. :)


                  Prasad MS MVP -  VC++

                  R Offline
                  R Offline
                  Rajesh R Subramanian
                  wrote on last edited by
                  #19

                  No programming discussion in the lounge :p

                  found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

                  P 1 Reply Last reply
                  0
                  • realJSOPR realJSOP

                    ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

                    "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                    -----
                    "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                    H Offline
                    H Offline
                    hairy_hats
                    wrote on last edited by
                    #20

                    This works in XP too - try making a copy of notepad.exe and call it install.exe. :rolleyes:

                    N L V 3 Replies Last reply
                    0
                    • N NormDroid

                      I thought we'd had April Fools :~

                      .net is a box of never ending treasures, every day I get find another gem.

                      J Offline
                      J Offline
                      JimmyRopes
                      wrote on last edited by
                      #21

                      Every day is April 1st for the Redmond security team. X| They have come out with some real winners. :rolleyes:

                      Simply Elegant Designs JimmyRopes Designs
                      Think inside the box! ProActive Secure Systems
                      I'm on-line therefore I am. JimmyRopes

                      1 Reply Last reply
                      0
                      • realJSOPR realJSOP

                        ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

                        "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                        -----
                        "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                        D Offline
                        D Offline
                        Duncan Edwards Jones
                        wrote on last edited by
                        #22

                        But then, what would be a sensible alternative? I thought maybe parsing the imports table for harmful API calls,...but then you'd have to do a whole lot of work going down through the entire imports tree.

                        '--8<------------------------ Ex Datis: Duncan Jones Merrion Computing Ltd

                        1 Reply Last reply
                        0
                        • H hairy_hats

                          This works in XP too - try making a copy of notepad.exe and call it install.exe. :rolleyes:

                          N Offline
                          N Offline
                          NormDroid
                          wrote on last edited by
                          #23

                          So this isn't something new?

                          .net is a box of never ending treasures, every day I get find another gem.

                          J D 2 Replies Last reply
                          0
                          • R Rajesh R Subramanian

                            John Simmons / outlaw programmer wrote:

                            If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run.

                            Microsoft: "Boffo" added to the list :cool: Now anything with "boffo" in its name will require admin priveleges!

                            found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

                            J Offline
                            J Offline
                            JimmyRopes
                            wrote on last edited by
                            #24

                            brahmma wrote:

                            Now anything with "boffo" in its name will require admin priveleges!

                            Yes but it won't come out until the next operating system is released! :~ Boffo is safe for a few years at least. :laugh:

                            Simply Elegant Designs JimmyRopes Designs
                            Think inside the box! ProActive Secure Systems
                            I'm on-line therefore I am. JimmyRopes

                            1 Reply Last reply
                            0
                            • N NormDroid

                              So this isn't something new?

                              .net is a box of never ending treasures, every day I get find another gem.

                              J Offline
                              J Offline
                              JimmyRopes
                              wrote on last edited by
                              #25

                              norm .net wrote:

                              So this isn't something new?

                              So you believed the marketing hype that Vista was rewritten from the ground up to make it more secure. :rolleyes:

                              Simply Elegant Designs JimmyRopes Designs
                              Think inside the box! ProActive Secure Systems
                              I'm on-line therefore I am. JimmyRopes

                              1 Reply Last reply
                              0
                              • R Rajesh R Subramanian

                                No programming discussion in the lounge :p

                                found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

                                P Offline
                                P Offline
                                prasad_som
                                wrote on last edited by
                                #26

                                Oops !


                                Prasad MS MVP -  VC++

                                1 Reply Last reply
                                0
                                • N NormDroid

                                  So this isn't something new?

                                  .net is a box of never ending treasures, every day I get find another gem.

                                  D Offline
                                  D Offline
                                  David Crow
                                  wrote on last edited by
                                  #27

                                  norm .net wrote:

                                  So this isn't something new?

                                  No, XP employs the same "feature"


                                  "A good athlete is the result of a good and worthy opponent." - David Crow

                                  "To have a respect for ourselves guides our morals; to have deference for others governs our manners." - Laurence Sterne

                                  1 Reply Last reply
                                  0
                                  • G gaurav_scr

                                    Do you mean if I rename a normal exe file to install.exe then it will ask for admin rights to start?

                                    realJSOPR Offline
                                    realJSOPR Offline
                                    realJSOP
                                    wrote on last edited by
                                    #28

                                    According to what I've read, yes.

                                    "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                                    -----
                                    "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                                    1 Reply Last reply
                                    0
                                    • P Pete OHanlon

                                      Link please.

                                      Deja View - the feeling that you've seen this post before.

                                      S Offline
                                      S Offline
                                      szukuro
                                      wrote on last edited by
                                      #29

                                      http://blogs.msdn.com/onoj/archive/2007/04/20/windows-vista-uac-and-installer-detection.aspx[^]

                                      1 Reply Last reply
                                      0
                                      • realJSOPR realJSOP

                                        ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

                                        "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                                        -----
                                        "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                                        S Offline
                                        S Offline
                                        Steve Thresher
                                        wrote on last edited by
                                        #30

                                        This is a good idea. Honest developers don't need to do anything to their installer other than change the name to get elevated permissions. Spyware programs cannot run without confirmation from the operator. The only problem I can see is if your everyday application is called setup or install which would seem very unlikely. Read this[^] for more information.

                                        AxisFirst For Business

                                        D J H 3 Replies Last reply
                                        0
                                        • H hairy_hats

                                          This works in XP too - try making a copy of notepad.exe and call it install.exe. :rolleyes:

                                          L Offline
                                          L Offline
                                          lost in transition
                                          wrote on last edited by
                                          #31

                                          That didn't work. I copied notepad.exe to my desktop, ran it and closed, then renamed it, ran it and closed with no problems.


                                          God Bless, Jason
                                          Programmer: A biological machine designed to convert caffeine into code.
                                          Developer: A person who develops working systems by writing and using software. [^]

                                          D 1 Reply Last reply
                                          0
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Don't have an account? Register

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups