Here’s the problem. So many legitimate things need elevation, and often multiple times in a single install. Guess what most Windows users do, when they see an elevation prompt. What do you reckon?
Honestly I don’t think it’s that bad. I have to use sudo just as often on linux as I have to accept the elevation box on win. Win11 has some serious issues but UAC is harmless.
Sudo is very different. You need to explicity enter your password. It may be cached for a short time and I’d argue that’s actually better.
If I’m installing something, it asks for my password once but can then raise to root multiple times that’s fine.
If I’m installing something and it asks for elevation three times, for example it needs to Install multiple drivers. It generates an automatic click when installing for many unexperienced users. It’s dangerous imo.
Sudo is just clicking “ok” with extra steps, thus making adding and removing programs more annoying, thus meaning the common user will probably just be logged in as root all the time. I challenge you to change my mind.
As a Linux beginner who has a couple of false starts into it being my daily driver I’ll say that there are two stumbling blocks left for me. Permissions “issues” is the bigger problem and some programs not being as fleshed out is the other.
That’s exactely what happened in my mind when I was getting started with Linux (kind of), although it’s arguably a habit that comes from using Windows where people don’t really think about OS users and permissions
So you think a person that would turn off UAC wouldn’t just put NOPASSWD in the sudoers? I doubt that. And even if they had to enter their pwd… Wouldn’t that just be annoying for the casual user instead of increasing security? I doubt they would be like “Oh I have to enter my pwd now, that really makes me think twice about whatever I was going to do with sudo.”
I feel like there’s a lot of misunderstanding about what I’m trying to say.
I’m saying the average windows user will begin to get fatigue when some installers ask for elevation 3 times (maybe more). They’ll end up just pavlovian clicking OK whenever that prompt appears. Which ends up circumventing the whole reason the prompt exists.
I don’t know. Not everyone who uses a computer should be an expert. Not everyone is 100% alert all the time. I know there has to be a line somewhere.
I feel like it would be really easy to have the OS check if the exe is appended to some other extension and force the user to rename it before allowing it to be executed.
Often they don’t. If more granular permissions were to be used. Hklm/programdata needing admin to do anything in it for example. Putting permissions on hklm/software/package to write is enough to make a lot of software work without opening up the whole system.
Here’s the problem. So many legitimate things need elevation, and often multiple times in a single install. Guess what most Windows users do, when they see an elevation prompt. What do you reckon?
Honestly I don’t think it’s that bad. I have to use sudo just as often on linux as I have to accept the elevation box on win. Win11 has some serious issues but UAC is harmless.
Sudo is very different. You need to explicity enter your password. It may be cached for a short time and I’d argue that’s actually better.
If I’m installing something, it asks for my password once but can then raise to root multiple times that’s fine.
If I’m installing something and it asks for elevation three times, for example it needs to Install multiple drivers. It generates an automatic click when installing for many unexperienced users. It’s dangerous imo.
It can’t really be compared to Sudo.
Sudo is just clicking “ok” with extra steps, thus making adding and removing programs more annoying, thus meaning the common user will probably just be logged in as root all the time. I challenge you to change my mind.
As a Linux beginner who has a couple of false starts into it being my daily driver I’ll say that there are two stumbling blocks left for me. Permissions “issues” is the bigger problem and some programs not being as fleshed out is the other.
That’s exactely what happened in my mind when I was getting started with Linux (kind of), although it’s arguably a habit that comes from using Windows where people don’t really think about OS users and permissions
So you think a person that would turn off UAC wouldn’t just put NOPASSWD in the sudoers? I doubt that. And even if they had to enter their pwd… Wouldn’t that just be annoying for the casual user instead of increasing security? I doubt they would be like “Oh I have to enter my pwd now, that really makes me think twice about whatever I was going to do with sudo.”
Can confirm, have borked my sysyem this way
if you give elevated permission to movie.mp4.exe, that’s natural selection
I feel like there’s a lot of misunderstanding about what I’m trying to say.
I’m saying the average windows user will begin to get fatigue when some installers ask for elevation 3 times (maybe more). They’ll end up just pavlovian clicking OK whenever that prompt appears. Which ends up circumventing the whole reason the prompt exists.
I don’t know. Not everyone who uses a computer should be an expert. Not everyone is 100% alert all the time. I know there has to be a line somewhere.
I feel like it would be really easy to have the OS check if the exe is appended to some other extension and force the user to rename it before allowing it to be executed.
Often they don’t. If more granular permissions were to be used. Hklm/programdata needing admin to do anything in it for example. Putting permissions on hklm/software/package to write is enough to make a lot of software work without opening up the whole system.