Win7 (&Vista) User Access Control & expired digital signature


Bleu_Guy

 

Posted

When I start cohupdater.exe I get a "User Access Control" warning asking if I want to allow City of Heroes Updater access to make changes to my computer .. (aka UAC).

I noticed (via right button/properties on cohupdater.exe) that the digital signare (issued to by "NCsoft" signing time: Feb.17,2010) says it is valid from 6/16/2009 to 6/17/2010.

OK. I have no idea how it's signing time is after the 'valid' date ... but either way, it's way past 6/17/2010.
So .. I'm guessing that's why I'm getting the UAC warning.

Are y'all seeing the same thing?

The game runs fine ... just annonying to click UAC everytime. (and I'm NOT wanting to turn UAC off).

also note: Yes, I've 'verified' files. ... still getting UAC warning.


 

Posted

might as well turn UAC off.

It's about as successful as any other Microsoft technology at preventing unauthorized access to your computer.

It doesn't actually work.

Just under a year ago 8/10 malware programs were already bypassing UAC: http://www.zdnet.com/blog/security/w...e-samples/4825

I can assure you that while the malware in use has matured over time, Microsoft's ability to create secure software has not. So if you are keeping UAC turned on for some sort of security reason, I have the bad news of telling you that it doesn't actually have any security benefit. You are just as vulnerable with it turned off as you are with it turned on.


 

Posted

Quote:
Originally Posted by je_saist View Post
might as well turn UAC off.

It's about as successful as any other Microsoft technology at preventing unauthorized access to your computer.

It doesn't actually work.
Yep. I was installing temperature monitoring software over the weekend and, during installation, it asked if it should deactivate UAC prompts for itself so it can load with Windows without bothering me.

If a legit program can ask if it should deactivate UAC (to which I replied yes, and it DID), then malware can certainly do it without asking.


Paragon City Search And Rescue
The Mentor Project

 

Posted

Quote:
Originally Posted by je_saist View Post

might as well turn UAC off.


It doesn't actually work.

... 8/10 malware programs were already bypassing UAC: http://www.zdnet.com/blog/security/w...e-samples/4825

...
Ah ... mostly agree EXCEPT ... your data says that it DOES work ... just not very well. (ok .. it's fairly crappy .. but..)

Why would I wan't to disable something that will block up to 20% more malware?

Turning it off will give me 0% additional protection.

In any case, if you pay a monthly fee for the right to use an executable that has a Digital Certificate you'd expected the certificate to be current woudn't you?