Vistas UAC Opens Wide Security Hole

“[When] you try to run such a program, you get a UAC prompt and you have only two choices: either to agree to run this application as administrator or to disallow running it at all. That means that if you downloaded some freeware Tetris game, you will have to run its installer as administrator, giving it not only full access to all your file system and registry, but also allowing it to load kernel drivers! Why should a Tetris installer be allowed to load kernel drivers?”

Good point. The article mentions that in XP, you had the choice whether or not to run the installer as an Administrator or not. When you don’t run as Admin, the installer has far less control over your system. Vistas scheme however, gives slim options. Admin, or nothing.

Source: ZD Net