About Net Security: February 6, 2009

Net Security In the Spotlight | More Topics |   from Tony Bradley, CISSP-ISSAP This week there has been a lot of attention focused on the User Account Control (UAC) feature of Windows. However, the attention hasn't been on Windows Vista. In response to the feedback Microsoft got about UAC in Windows Vista they modified its behavior for Windows 7. Some Windows 7 Beta testers identified some potential issues that could allow malware to disable or circumvent UAC and there has been passionate debate throughout the 'blogosphere' about whether this is an issue or not. I posted an overview of the debate, and I also posted a detailed explanation of the Windows Vista Local Security Policy settings you can use to customize the behavior of UAC in Windows Vista.   In the Spotlight Modified UAC in Windows 7 Exposes Potential Security Issues One of the most maligned features of Windows Vista has been UAC (User Account Control). While the purpose of UAC is primarily to enforce Least Privileged Access and encourage enterprises and individual users to operate as Standard Users rather than as Local Administrators, UAC is largely perceived as a security control. It has security implications, but it is not specifically designed with security in mind. That said, there has been a great deal of controversy...read more              More Topics What is UAC? PMIE (Protected Mode Internet Explorer) Configure or Disable UAC in Windows Vista Home Top 5 Antispyware Products for 2009 Product Review: Ad-Aware Pro AE Vista Password Policy Settings Explained What is ASLR? Vista UAC Settings Explained The User Account Control (UAC) feature of Windows Vista is one of the most misunderstood features in the history of Windows operating systems (comments are open and available for feedback if you wish to nominate other Windows features that surpass UAC in this department). It is not a security control, but the prompt for elevation consent has the look and feel of protecting the operating system so security takes most of the 'blame'...read more   Product Review: Prevx Edge 3.0 Prevx isn't a household name in PC security the way McAfee, Trend Micro, or Symantec are. Actually, Prevx is arguably less well-known even than other less commercial security vendors such as Kaspersky or Sophos. But, if you've been reading this site for a while you might be familiar with one of their inaugural products, Prevx Home...read more     Sponsored Links   Best Moves in a Bad Economy Save & Invest the Right Way Find out how to beat a bear market, make smart choices, and keep your cool even when the economy is unpredictable. Internet / Network Security Ads Virus Security Security News AntiVirus Windows Security Virus Removal Advertisement     Visit Related About GuideSites: Wireless / Networking Antivirus Software Focus on Windows Email internet   Search About      Sign up for more free newsletters on favorite topics. You are receiving this newsletter because you subscribed to the About Net Security newsletter as security.world@GMAIL.COM. If you wish to change or remove your email address, please visit: http://www.about.com/nl/usgs.htm?nl=netsecurity&e=security.world@GMAIL.COM About respects your privacy. Our Privacy Policy. Our Contact Information. 249 West 17th Street New York, NY, 10011 © 2008 About, Inc.