Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 830100" data-attributes="member: 32260">The malware in the home environment is initiated with standard rigths. If the processes with standard rights are additionally restricted by you then they cannot elevate without your permission.The only probable way of calling the malicious module from GitHub is calling it by the user. So, if you are using for productivity Microsoft Visual Studio started by elevated Total Commander on Administrator account you must use only trusted resources.You can run anything that uses not trusted resources on highly restricted SUA without using an elevated shell.Splitting the user activity between two or more accounts with different level of security is easier than seeking one security for the wide spectrum of user activities.But, it does not mean that you should stop doing this.<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite135" alt=":giggle:" title="Giggle&nbsp; &nbsp; :giggle:" loading="lazy" data-shortname=":giggle:" /><img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" /></blockquote>

[QUOTE="Andy Ful, post: 830100, member: 32260"] The malware in the home environment is initiated with standard rigths. If the processes with standard rights are additionally restricted by you then they cannot elevate without your permission. The only probable way of calling the malicious module from GitHub is calling it by the user. So, if you are using for productivity Microsoft Visual Studio started by elevated Total Commander on Administrator account you must use only trusted resources. You can run anything that uses not trusted resources on highly restricted SUA without using an elevated shell. Splitting the user activity between two or more accounts with different level of security is easier than seeking one security for the wide spectrum of user activities. But, it does not mean that you should stop doing this.:giggle:(y) [/QUOTE]

Verification