Language Selection

English French German Italian Portuguese Spanish

Fewer permissions are key to Longhorn security

Filed under
Microsoft

Software engineers who attend Microsoft's (Profile, Products, Articles) annual Windows Hardware Engineering Conference later this month could get their first taste of a new Windows user permissions model that could change the way thousands of programs are developed and run. But as the company prepares for the final Longhorn development push, questions remain about its plans for a new user privileges model called Least-Privilege User Account, or LUA.

Microsoft claims that LUA will make life tougher for hackers and virus writers by limiting access to administrator permissions on Windows systems. But the company has been mum in recent months about its plans for implementing LUA in Longhorn, and it is considering incentives to encourage adoption of LUA (pronounced "Loo-ah") by skeptical ISVs (independent software vendors), including a new logo program for LUA compliance, according to interviews with ISVs and industry experts.

Least permissions is a principle of computer security that recommends giving software applications and their users no more privileges on an operating system than are absolutely necessary. Widely accepted within the software development community, least permissions has often been overlooked in recent years, as operating system and application software companies worked to make it easier to use software, said John Pescatore, vice president of Internet security at Gartner.

Microsoft said it will encourage the use of least permissions in Longhorn by making it easier for users to do common tasks without administrator privileges. For example, the company may modify Windows so reduced permissions users can alter display and power management settings on their machine and use VPN (virtual private network) technology more easily. Other changes will allow developers to create per user installations of applications, with user-specific settings saved in the "my programs" folder, rather than a globally accessible program files directory that requires administrative permissions to change, according to documents and presentations on Microsoft's Web page.

Full Story.

More in Tux Machines

Ubuntu: New Users, Unity Remix, 18.04 LTS News

  • How to Get Started With the Ubuntu Linux Distro
    The Linux operating system has evolved from a niche audience to widespread popularity since its creation in the mid 1990s, and with good reason. Once upon a time, that installation process was a challenge, even for those who had plenty of experience with such tasks. The modern day Linux, however, has come a very long way. To that end, the installation of most Linux distributions is about as easy as installing an application. If you can install Microsoft Office or Adobe Photoshop, you can install Linux. Here, we’ll walk you through the process of installing Ubuntu Linux 17.04, which is widely considered one of the most user-friendly distributions. (A distribution is a variation of Linux, and there are hundreds and hundreds to choose from.)
  • An ‘Ubuntu Unity Remix’ Might Be on the Way…
    A new Ubuntu flavor that uses the Unity 7 desktop by default is under discussion. The plans have already won backing from a former Unity developer.
  • Ubuntu News: Get Firefox Quantum Update Now; Ubuntu 18.04 New Icon Theme Confirmed
    Earlier this week, Mozilla earned big praises in the tech world for launching its next-generation Firefox Quantum 57.0 web browser. The browser claims to be faster and better than market leader Google Chrome. Now, Firefox Quantum is available for all supported Ubuntu versions from the official repositories. The Firefox Quantum Update is also now available.
  • New Icon Theme Confirmed for Ubuntu 18.04 LTS
    ‘Suru’ is (apparently) going to be the default icon theme in Ubuntu 18.04 LTS. That’s Suru, the rebooted community icon theme and not Suru, the Canonical-created icon theme that shipped on the Ubuntu Phone (and was created by Matthieu James, who recently left Canonical).

OnePlus 5T Launched

  • OnePlus 5T Keeps the Headphone Jack, Introduces Face Unlock and Parallel Apps
    Five months after it launched its OnePlus 5 flagship Android smartphone, OnePlus unveiled today its successor, the OnePlus 5T, running the latest Android 8.0 (Oreo) mobile OS. OnePlus held a live event today in New York City to tell us all about the new features it implemented in the OnePlus 5T, and they don't disappoint as the smartphone features a gorgeous and bright 6.0-inches Optic AMOLED capacitive touchscreen with multitouch, a 1080x2160 pixels resolution, 18:9 ratio, and approximately 402 PPI density. The design has been changed a bit as well for OnePlus 5T, which is made of anodized aluminum.
  • OnePlus 5T Launched: Comes With Bigger Screen, Better Dual Camera, And Face Unlock
    Whenever costly phones like iPhone X or Google Pixel 2 are bashed (here and here) and their alternatives are discussed, OnePlus is always mentioned. In the past few years, the company has amassed a fan base that has found the concept of “Never Settle” impressive.
  •  

Fedora 28 and Fedora 27

  • Fedora 28 Hopes To Improve Linux Laptop Battery Life
    Red Hat's Hans de Goede is spearheading an effort to improve the Fedora battery life of laptops -- and should conserve power too for desktops running Fedora Workstation -- for the current Fedora 28 cycle.
  • Fedora 27 Atomic Host is available on multiple architectures
    The Fedora 27 Atomic Host now supports multiple architectures! Along with the x86_64 architecture, Atomic Host is also available on 64-bit ARM (aarch64) and PowerPC Little Endian (ppc64le). Both aarch64 and ppc64le architectures receive Atomic OSTree updates in the same way x86_64 does.

today's howtos