Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. Did You Guys Hear...

Did You Guys Hear...

Scheduled Pinned Locked Moved The Lounge
securityquestion
60 Posts 31 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • realJSOPR realJSOP

    ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

    "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
    -----
    "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

    D Offline
    D Offline
    Dario Solera
    wrote on last edited by
    #13

    I couldn't believe, so I tried to rename an EXE file to Setup.exe or Install.exe. It's true. :|

    ________________________________________________ Personal Blog [ITA] - Tech Blog [ENG] - My Photos ScrewTurn Wiki 2.0.4

    M 1 Reply Last reply
    0
    • D Dario Solera

      I couldn't believe, so I tried to rename an EXE file to Setup.exe or Install.exe. It's true. :|

      ________________________________________________ Personal Blog [ITA] - Tech Blog [ENG] - My Photos ScrewTurn Wiki 2.0.4

      M Offline
      M Offline
      Maximilien
      wrote on last edited by
      #14

      so there's a huge strcmp in the code ?!?%!%


      Maximilien Lincourt Your Head A Splode - Strong Bad

      P 1 Reply Last reply
      0
      • realJSOPR realJSOP

        ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

        "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
        -----
        "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

        G Offline
        G Offline
        gvisgr8
        wrote on last edited by
        #15

        are you sure.......:wtf: i knew MS is not that smart in security but this stupid method for preventing malware .......is juz too much.... X| X| :wtf::omg::wtf:.

        1 Reply Last reply
        0
        • realJSOPR realJSOP

          ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

          "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
          -----
          "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

          R Offline
          R Offline
          Rajesh R Subramanian
          wrote on last edited by
          #16

          John Simmons / outlaw programmer wrote:

          If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run.

          Microsoft: "Boffo" added to the list :cool: Now anything with "boffo" in its name will require admin priveleges!

          found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

          P J M 3 Replies Last reply
          0
          • M Maximilien

            so there's a huge strcmp in the code ?!?%!%


            Maximilien Lincourt Your Head A Splode - Strong Bad

            P Offline
            P Offline
            prasad_som
            wrote on last edited by
            #17

            Maximilien wrote:

            so there's a huge strcmp in the code

            strstr, probably. :)


            Prasad MS MVP -  VC++

            R 1 Reply Last reply
            0
            • R Rajesh R Subramanian

              John Simmons / outlaw programmer wrote:

              If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run.

              Microsoft: "Boffo" added to the list :cool: Now anything with "boffo" in its name will require admin priveleges!

              found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

              P Offline
              P Offline
              prasad_som
              wrote on last edited by
              #18

              :laugh:


              Prasad MS MVP -  VC++

              1 Reply Last reply
              0
              • P prasad_som

                Maximilien wrote:

                so there's a huge strcmp in the code

                strstr, probably. :)


                Prasad MS MVP -  VC++

                R Offline
                R Offline
                Rajesh R Subramanian
                wrote on last edited by
                #19

                No programming discussion in the lounge :p

                found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

                P 1 Reply Last reply
                0
                • realJSOPR realJSOP

                  ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

                  "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                  -----
                  "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                  H Offline
                  H Offline
                  hairy_hats
                  wrote on last edited by
                  #20

                  This works in XP too - try making a copy of notepad.exe and call it install.exe. :rolleyes:

                  N L V 3 Replies Last reply
                  0
                  • N NormDroid

                    I thought we'd had April Fools :~

                    .net is a box of never ending treasures, every day I get find another gem.

                    J Offline
                    J Offline
                    JimmyRopes
                    wrote on last edited by
                    #21

                    Every day is April 1st for the Redmond security team. X| They have come out with some real winners. :rolleyes:

                    Simply Elegant Designs JimmyRopes Designs
                    Think inside the box! ProActive Secure Systems
                    I'm on-line therefore I am. JimmyRopes

                    1 Reply Last reply
                    0
                    • H hairy_hats

                      This works in XP too - try making a copy of notepad.exe and call it install.exe. :rolleyes:

                      N Offline
                      N Offline
                      NormDroid
                      wrote on last edited by
                      #22

                      So this isn't something new?

                      .net is a box of never ending treasures, every day I get find another gem.

                      J D 2 Replies Last reply
                      0
                      • realJSOPR realJSOP

                        ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

                        "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                        -----
                        "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                        D Offline
                        D Offline
                        Duncan Edwards Jones
                        wrote on last edited by
                        #23

                        But then, what would be a sensible alternative? I thought maybe parsing the imports table for harmful API calls,...but then you'd have to do a whole lot of work going down through the entire imports tree.

                        '--8<------------------------ Ex Datis: Duncan Jones Merrion Computing Ltd

                        1 Reply Last reply
                        0
                        • R Rajesh R Subramanian

                          John Simmons / outlaw programmer wrote:

                          If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run.

                          Microsoft: "Boffo" added to the list :cool: Now anything with "boffo" in its name will require admin priveleges!

                          found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

                          J Offline
                          J Offline
                          JimmyRopes
                          wrote on last edited by
                          #24

                          brahmma wrote:

                          Now anything with "boffo" in its name will require admin priveleges!

                          Yes but it won't come out until the next operating system is released! :~ Boffo is safe for a few years at least. :laugh:

                          Simply Elegant Designs JimmyRopes Designs
                          Think inside the box! ProActive Secure Systems
                          I'm on-line therefore I am. JimmyRopes

                          1 Reply Last reply
                          0
                          • N NormDroid

                            So this isn't something new?

                            .net is a box of never ending treasures, every day I get find another gem.

                            J Offline
                            J Offline
                            JimmyRopes
                            wrote on last edited by
                            #25

                            norm .net wrote:

                            So this isn't something new?

                            So you believed the marketing hype that Vista was rewritten from the ground up to make it more secure. :rolleyes:

                            Simply Elegant Designs JimmyRopes Designs
                            Think inside the box! ProActive Secure Systems
                            I'm on-line therefore I am. JimmyRopes

                            1 Reply Last reply
                            0
                            • R Rajesh R Subramanian

                              No programming discussion in the lounge :p

                              found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

                              P Offline
                              P Offline
                              prasad_som
                              wrote on last edited by
                              #26

                              Oops !


                              Prasad MS MVP -  VC++

                              1 Reply Last reply
                              0
                              • N NormDroid

                                So this isn't something new?

                                .net is a box of never ending treasures, every day I get find another gem.

                                D Offline
                                D Offline
                                David Crow
                                wrote on last edited by
                                #27

                                norm .net wrote:

                                So this isn't something new?

                                No, XP employs the same "feature"


                                "A good athlete is the result of a good and worthy opponent." - David Crow

                                "To have a respect for ourselves guides our morals; to have deference for others governs our manners." - Laurence Sterne

                                1 Reply Last reply
                                0
                                • G gaurav_scr

                                  Do you mean if I rename a normal exe file to install.exe then it will ask for admin rights to start?

                                  realJSOPR Offline
                                  realJSOPR Offline
                                  realJSOP
                                  wrote on last edited by
                                  #28

                                  According to what I've read, yes.

                                  "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                                  -----
                                  "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                                  1 Reply Last reply
                                  0
                                  • realJSOPR realJSOP

                                    ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

                                    "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                                    -----
                                    "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                                    S Offline
                                    S Offline
                                    Steve Thresher
                                    wrote on last edited by
                                    #29

                                    This is a good idea. Honest developers don't need to do anything to their installer other than change the name to get elevated permissions. Spyware programs cannot run without confirmation from the operator. The only problem I can see is if your everyday application is called setup or install which would seem very unlikely. Read this[^] for more information.

                                    AxisFirst For Business

                                    D J H 3 Replies Last reply
                                    0
                                    • P Pete OHanlon

                                      Link please.

                                      Deja View - the feeling that you've seen this post before.

                                      S Offline
                                      S Offline
                                      szukuro
                                      wrote on last edited by
                                      #30

                                      http://blogs.msdn.com/onoj/archive/2007/04/20/windows-vista-uac-and-installer-detection.aspx[^]

                                      1 Reply Last reply
                                      0
                                      • H hairy_hats

                                        This works in XP too - try making a copy of notepad.exe and call it install.exe. :rolleyes:

                                        L Offline
                                        L Offline
                                        lost in transition
                                        wrote on last edited by
                                        #31

                                        That didn't work. I copied notepad.exe to my desktop, ran it and closed, then renamed it, ran it and closed with no problems.


                                        God Bless, Jason
                                        Programmer: A biological machine designed to convert caffeine into code.
                                        Developer: A person who develops working systems by writing and using software. [^]

                                        D 1 Reply Last reply
                                        0
                                        • realJSOPR realJSOP

                                          ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

                                          "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                                          -----
                                          "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                                          B Offline
                                          B Offline
                                          Bradml
                                          wrote on last edited by
                                          #32

                                          Idiots.


                                          Brad Australian - Bradml on "The ADOTD" Hey all, did you just use/read an acronym? Post it HERE, at the ADOTD[^]

                                          1 Reply Last reply
                                          0
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Don't have an account? Register

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups