Reply to thread

Message

<blockquote data-quote="danb" data-source="post: 1079652" data-attributes="member: 62850">I have personally witnessed thousands of “Yes” UAC end-user clicks since it was released with Windows Vista in 2007, and not a SINGLE “No” end-user click.&nbsp; I remember how excited I was when Microsoft announced UAC in 2006, and was hoping it would drastically reduce malware infections, but was highly disappointed when I experienced the implementation first hand.&nbsp; A lot of people do not know this, but my disappointment in Microsoft’s implementation of UAC was a huge reason VoodooShield was created in the first place.The main issue with UAC is that it requires the end-user to make a binary decision on the spot, and even worse, the UAC affirmative user prompt provides little or no file insight or user recommendation to the end-user so they can make an informed decision.&nbsp; The end result is that the end-user almost always simply clicks &quot;Yes&quot;.[USER=99014]@Trident[/USER] is not wrong when he says “Asking the user what should be done in terms of security is a concept that is not preferred”.&nbsp; But at the same time, allow-by-default guarantees breaches and infections will only continue.&nbsp; There has to be a happy medium, we just have to find it.In short, this is the principal problem that we have been working on for over a decade, and are open to suggestions for usability improvements, especially from those who have not tried CyberLock first hand.&nbsp; We have fixed the major issues with UAC, but there is always room for improvement, especially when it comes to usability.</blockquote>

[QUOTE="danb, post: 1079652, member: 62850"] I have personally witnessed thousands of “Yes” UAC end-user clicks since it was released with Windows Vista in 2007, and not a SINGLE “No” end-user click. I remember how excited I was when Microsoft announced UAC in 2006, and was hoping it would drastically reduce malware infections, but was highly disappointed when I experienced the implementation first hand. A lot of people do not know this, but my disappointment in Microsoft’s implementation of UAC was a huge reason VoodooShield was created in the first place. The main issue with UAC is that it requires the end-user to make a binary decision on the spot, and even worse, the UAC affirmative user prompt provides little or no file insight or user recommendation to the end-user so they can make an informed decision. The end result is that the end-user almost always simply clicks "Yes". [USER=99014]@Trident[/USER] is not wrong when he says “Asking the user what should be done in terms of security is a concept that is not preferred”. But at the same time, allow-by-default guarantees breaches and infections will only continue. There has to be a happy medium, we just have to find it. In short, this is the principal problem that we have been working on for over a decade, and are open to suggestions for usability improvements, especially from those who have not tried CyberLock first hand. We have fixed the major issues with UAC, but there is always room for improvement, especially when it comes to usability. [/QUOTE]

Verification