Microsoft want to Annoy you, Cancel or Allow?

Saturday April 12thMicrosoft, Security Category

Before I even started using Vista, I hated UAC. I read about it all over the place, and laughed at the stupidity involved in asking users to constantly “cancel or allow” every action they wanted to take. As soon as I was forced to use Vista for work (both on my work laptop and on site with the client) I turned off UAC on both installations.

UAC has been a nagging frustration for a lot of Vista users, and has also been a joke to the Apple fans as well:

Yeah, I laughed too.

But I didn’t really give UAC any credit. I didn’t think about why it was there, all I thought was that MS were being stupid. That was until a couple of days ago when I was thinking about it (don’t ask me why ;) ).

After deliberating on it for a day or so, trying to come up with the motivation behind it, this landed in my RSS feed reader and made it clear. MS are taking a hit in the hope that devs will sort their shit out!

Windows users have had a long history of being administrators of their own machines by default. In general, most users do not login using an account with low levels of privileges. In Windows it has been too much of a pain in the butt to get anything done if you don’t. Is that the fault of MS and Windows? Yes it is, but it’s not their fault alone.

Looking back through history, developers who write software for Windows haven’t really been particularly brilliant when it comes to being mindful of security. This is something that needs to change. Some really basic applications, office applications, editors and even games have require administrator privileges to run. It’s no wonder that everyone decides to give themselves an admin account. Why would you want to face constant issues with security when all the things you’re trying to use need the elevated access?

The fault lies with the developers. They need to get into the habit of writing software that doesn’t require elevated privileges. UAC is part of MS’s effort to force the plebian developers to sort their shit out. By the looks of it, it’s beginning to work. It’s a brave move on MS’s part, as pissing off users to force developers to be mindful of security is not necessarily the smartest thing to do. Vista has enough pitfalls as it is without having something that’s designed to being annoying popping up in your face all the time.

Let’s hope the trend continues. In a perfect world it’d be fine to have something like UAC running all the time, so long as it doesn’t appear all the time!

Note for those who care: sorry for the poorly written post :) I couldn’t be bothered fixing it up, it’s late and it’s time for bed!

3 Comments

  1. Keef
    April 29, 2008

    I’m not finding UAC that annoying, except with old software (until recently WinRar required admin rights every time I ran it which was really annoying).

    On a usual day (browse the web, play a game for a bit, etc) I never get any prompts.

    Surely it’s no different to “su” in linux (except there the software is already written to have the correct access rights so it’s not annoying).

  2. OJ
    April 30, 2008

    UAC is annoying — hands down. There is no argument :)

    Do you mean ’su’ or do you me ’sudo’? If you mean the former, then yes it is. But ’sudo’ — absolutely not. It’s not as in your face, not half as frustrating, and doesn’t cause a fullscreen flicker because of Aero doing something stupid every time the security mechanism kicks in.

    I’m surprised to hear WinRar require admin rights, but that could have something to do with it extracting to temp or something? Not sure. Perhaps you should email the author and tell him?

  3. Keef
    April 30, 2008

    Ah yes, the full screen flicker *is* damned annoying.

    WinRar was fixed anyway so it’s not a problem any more.

Leave a comment

Size

Colors