Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If you rely on the lack of admin rights to prevent unauthorised software from being run you’re doing it wrong. You should be using whitelisting (e.g. AppLocker in Windows) which also prevents “portable” applications (without an installer) from being used.


I don't disagree, but a significant majority of IT environments are "done wrong".




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: