How can an application "bypass NTFS permissions?" Presumably you mean the application is running with administrative access privileges. This I can understand - it is incredibly difficult to write a Windows application that runs properly without administrative privileges, and to get it installed so that it doesn't magically grab them.

The place where Microsoft has to get really serious about security is in making it easy to write and run programs that use the file system, and difficult to write and run programs that "must" have admin privileges. If they fix the security issues at the OS intefaces, many, many of the other security problems just go away.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/285/29599#29599