Windows 8 App Blacklisting Mechanism Is Real

[jamescv7]

It’s somewhat to be expected of Microsoft to build additional mitigation layers into the next major iteration of Windows, and it appears that one extra security mechanism has been confirmed for Windows 8 on top of what’s available by default today in Windows 7.

Softpedia readers might remember that in late 2010 I began writing a series of articles designed to outline some of the items on my Windows vNext wish list.

http://news.softpedia.com/news/Windows-8-App-Blacklisting-Mechanism-Is-Real-194091.shtml

 

[Ink]

Sweet!

I never thought this would actually happen.

 

[jamescv7]

That was the one of the awesome feature for Windows 8, good for implementing it.

 

[bogdan]

Great! Using LUA + UAC is really efficient in stopping malware, but a pain to use since UAC prompts appear for all non-digitally signed apps, good or bad. Whitelisting good apps should solve most of the problem.

We'll probably see more digitally signed apps (with valid certificates). We've already seen some cases where certificates are given away to easy. Blacklisting is not the most efficient way to fight against this but it still looks like a huge step forward in Windows security. Time will tell though.

 

[jamescv7]

Just a bit information on never run programs

Update: To clarify, the “never run programs” options is not on by default.

Source