Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. Did You Guys Hear...

Did You Guys Hear...

Scheduled Pinned Locked Moved The Lounge
securityquestion
60 Posts 31 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • D Dario Solera

    I couldn't believe, so I tried to rename an EXE file to Setup.exe or Install.exe. It's true. :|

    ________________________________________________ Personal Blog [ITA] - Tech Blog [ENG] - My Photos ScrewTurn Wiki 2.0.4

    M Offline
    M Offline
    Maximilien
    wrote on last edited by
    #14

    so there's a huge strcmp in the code ?!?%!%


    Maximilien Lincourt Your Head A Splode - Strong Bad

    P 1 Reply Last reply
    0
    • R realJSOP

      ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

      "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
      -----
      "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

      G Offline
      G Offline
      gvisgr8
      wrote on last edited by
      #15

      are you sure.......:wtf: i knew MS is not that smart in security but this stupid method for preventing malware .......is juz too much.... X| X| :wtf::omg::wtf:.

      1 Reply Last reply
      0
      • M Maximilien

        so there's a huge strcmp in the code ?!?%!%


        Maximilien Lincourt Your Head A Splode - Strong Bad

        P Offline
        P Offline
        prasad_som
        wrote on last edited by
        #16

        Maximilien wrote:

        so there's a huge strcmp in the code

        strstr, probably. :)


        Prasad MS MVP -  VC++

        R 1 Reply Last reply
        0
        • R realJSOP

          ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

          "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
          -----
          "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

          R Offline
          R Offline
          Rajesh R Subramanian
          wrote on last edited by
          #17

          John Simmons / outlaw programmer wrote:

          If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run.

          Microsoft: "Boffo" added to the list :cool: Now anything with "boffo" in its name will require admin priveleges!

          found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

          P J M 3 Replies Last reply
          0
          • R Rajesh R Subramanian

            John Simmons / outlaw programmer wrote:

            If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run.

            Microsoft: "Boffo" added to the list :cool: Now anything with "boffo" in its name will require admin priveleges!

            found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

            P Offline
            P Offline
            prasad_som
            wrote on last edited by
            #18

            :laugh:


            Prasad MS MVP -  VC++

            1 Reply Last reply
            0
            • P prasad_som

              Maximilien wrote:

              so there's a huge strcmp in the code

              strstr, probably. :)


              Prasad MS MVP -  VC++

              R Offline
              R Offline
              Rajesh R Subramanian
              wrote on last edited by
              #19

              No programming discussion in the lounge :p

              found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

              P 1 Reply Last reply
              0
              • R realJSOP

                ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

                "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                -----
                "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                H Offline
                H Offline
                hairy_hats
                wrote on last edited by
                #20

                This works in XP too - try making a copy of notepad.exe and call it install.exe. :rolleyes:

                N L V 3 Replies Last reply
                0
                • N NormDroid

                  I thought we'd had April Fools :~

                  .net is a box of never ending treasures, every day I get find another gem.

                  J Offline
                  J Offline
                  JimmyRopes
                  wrote on last edited by
                  #21

                  Every day is April 1st for the Redmond security team. X| They have come out with some real winners. :rolleyes:

                  Simply Elegant Designs JimmyRopes Designs
                  Think inside the box! ProActive Secure Systems
                  I'm on-line therefore I am. JimmyRopes

                  1 Reply Last reply
                  0
                  • R realJSOP

                    ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

                    "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                    -----
                    "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                    D Offline
                    D Offline
                    Duncan Edwards Jones
                    wrote on last edited by
                    #22

                    But then, what would be a sensible alternative? I thought maybe parsing the imports table for harmful API calls,...but then you'd have to do a whole lot of work going down through the entire imports tree.

                    '--8<------------------------ Ex Datis: Duncan Jones Merrion Computing Ltd

                    1 Reply Last reply
                    0
                    • H hairy_hats

                      This works in XP too - try making a copy of notepad.exe and call it install.exe. :rolleyes:

                      N Offline
                      N Offline
                      NormDroid
                      wrote on last edited by
                      #23

                      So this isn't something new?

                      .net is a box of never ending treasures, every day I get find another gem.

                      J D 2 Replies Last reply
                      0
                      • R Rajesh R Subramanian

                        John Simmons / outlaw programmer wrote:

                        If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run.

                        Microsoft: "Boffo" added to the list :cool: Now anything with "boffo" in its name will require admin priveleges!

                        found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

                        J Offline
                        J Offline
                        JimmyRopes
                        wrote on last edited by
                        #24

                        brahmma wrote:

                        Now anything with "boffo" in its name will require admin priveleges!

                        Yes but it won't come out until the next operating system is released! :~ Boffo is safe for a few years at least. :laugh:

                        Simply Elegant Designs JimmyRopes Designs
                        Think inside the box! ProActive Secure Systems
                        I'm on-line therefore I am. JimmyRopes

                        1 Reply Last reply
                        0
                        • N NormDroid

                          So this isn't something new?

                          .net is a box of never ending treasures, every day I get find another gem.

                          J Offline
                          J Offline
                          JimmyRopes
                          wrote on last edited by
                          #25

                          norm .net wrote:

                          So this isn't something new?

                          So you believed the marketing hype that Vista was rewritten from the ground up to make it more secure. :rolleyes:

                          Simply Elegant Designs JimmyRopes Designs
                          Think inside the box! ProActive Secure Systems
                          I'm on-line therefore I am. JimmyRopes

                          1 Reply Last reply
                          0
                          • R Rajesh R Subramanian

                            No programming discussion in the lounge :p

                            found at bash.org [kernx]|.|.|.|.|.|.|.| [kernx]sorry, wrong window [beox33]say me why in the f*ck will you type that in any window

                            P Offline
                            P Offline
                            prasad_som
                            wrote on last edited by
                            #26

                            Oops !


                            Prasad MS MVP -  VC++

                            1 Reply Last reply
                            0
                            • N NormDroid

                              So this isn't something new?

                              .net is a box of never ending treasures, every day I get find another gem.

                              D Offline
                              D Offline
                              David Crow
                              wrote on last edited by
                              #27

                              norm .net wrote:

                              So this isn't something new?

                              No, XP employs the same "feature"


                              "A good athlete is the result of a good and worthy opponent." - David Crow

                              "To have a respect for ourselves guides our morals; to have deference for others governs our manners." - Laurence Sterne

                              1 Reply Last reply
                              0
                              • G gaurav_scr

                                Do you mean if I rename a normal exe file to install.exe then it will ask for admin rights to start?

                                R Offline
                                R Offline
                                realJSOP
                                wrote on last edited by
                                #28

                                According to what I've read, yes.

                                "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                                -----
                                "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                                1 Reply Last reply
                                0
                                • R realJSOP

                                  ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

                                  "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                                  -----
                                  "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                                  S Offline
                                  S Offline
                                  Steve Thresher
                                  wrote on last edited by
                                  #29

                                  This is a good idea. Honest developers don't need to do anything to their installer other than change the name to get elevated permissions. Spyware programs cannot run without confirmation from the operator. The only problem I can see is if your everyday application is called setup or install which would seem very unlikely. Read this[^] for more information.

                                  AxisFirst For Business

                                  D J H 3 Replies Last reply
                                  0
                                  • P Pete OHanlon

                                    Link please.

                                    Deja View - the feeling that you've seen this post before.

                                    S Offline
                                    S Offline
                                    szukuro
                                    wrote on last edited by
                                    #30

                                    http://blogs.msdn.com/onoj/archive/2007/04/20/windows-vista-uac-and-installer-detection.aspx[^]

                                    1 Reply Last reply
                                    0
                                    • H hairy_hats

                                      This works in XP too - try making a copy of notepad.exe and call it install.exe. :rolleyes:

                                      L Offline
                                      L Offline
                                      lost in transition
                                      wrote on last edited by
                                      #31

                                      That didn't work. I copied notepad.exe to my desktop, ran it and closed, then renamed it, ran it and closed with no problems.


                                      God Bless, Jason
                                      Programmer: A biological machine designed to convert caffeine into code.
                                      Developer: A person who develops working systems by writing and using software. [^]

                                      D 1 Reply Last reply
                                      0
                                      • R realJSOP

                                        ...that Vista determines what apps should be run with admin privileges based on the name of the executable? If the name of your exe includes "Install", Vista will require admin rights for it to run. If you simple change the name of the exe to something like "Boffo", it will NOT require admin rights to run. Microsoft claims it was a method for preventing malware to run, but now that the malware authors know about it, I guess it's been reduced to yet another pointless "security" feature. Way to go, MS!

                                        "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                                        -----
                                        "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                                        B Offline
                                        B Offline
                                        Bradml
                                        wrote on last edited by
                                        #32

                                        Idiots.


                                        Brad Australian - Bradml on "The ADOTD" Hey all, did you just use/read an acronym? Post it HERE, at the ADOTD[^]

                                        1 Reply Last reply
                                        0
                                        • L lost in transition

                                          That didn't work. I copied notepad.exe to my desktop, ran it and closed, then renamed it, ran it and closed with no problems.


                                          God Bless, Jason
                                          Programmer: A biological machine designed to convert caffeine into code.
                                          Developer: A person who develops working systems by writing and using software. [^]

                                          D Offline
                                          D Offline
                                          Dario Solera
                                          wrote on last edited by
                                          #33

                                          You should try with a normal user account, not administrator.

                                          ________________________________________________ Personal Blog [ITA] - Tech Blog [ENG] - My Photos ScrewTurn Wiki 2.0.4

                                          L 1 Reply Last reply
                                          0
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Don't have an account? Register

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups