this post was submitted on 11 Nov 2024
-44 points (20.3% liked)

Linuxsucks

236 readers
3 users here now

Rules:

  1. FOSS advocates and Linux evangelists aren't welcome. -We ask that you block us.
  2. Moderation is heavy handed. Try to stay on topic (that is LINUXSUCKS!).
  3. No Complaining Mute the sub if users, content, or rules bother you *it's ok to report rule violations

founded 3 months ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[โ€“] [email protected] 1 points 2 months ago* (last edited 2 months ago) (1 children)

Windows is technically almost as secure though , since the confirmation prompt is displayed on a virtual desktop that even already elevated processes need extra privileges to access... still wont protect against someone else doing stuff on your computer tho

[โ€“] [email protected] 1 points 2 months ago

There are methods to use libraries to click that or completely silence it. If a user can escalate so can code that is run in their user space.

One example they claim to be a non issue, in link below. I searched "rce bypass windows uac"... I found lot of discussion on it, even some git repos.

https://www.darkreading.com/vulnerabilities-threats/exploit-chain-windows-uac-bypass