Thursday, April 01, 2010

90% of Windows 7 flaws fixed by removing admin rights

Here's a quick, interesting article from Ars Technica (based on a study by BeyondTrust)regarding Windows 7 vulnerabilities and administrative rights in Windows.

It's always a delicate balancing act for us, between giving users enough rights to get their jobs done (and not having to continually ask us to install things for them), and giving every user local admin rights on their computer, allowing them to infect themselves with all manner of viruses, malware and other "unapproved applications" (unsafe screen savers, p2p file sharing apps, etc.).

I'm not surprised that admin rights are a root cause of many security vulnerabilities, but I never would have guessed 90%.

No comments: