Wednesday 14 July 2010

Security experts don’t trust least-privilege products

According to Putting limits on users' privileges, some security experts don’t trust least-privilege products on the basis that rogue users or determined hackers can misuse the products to grant themselves unauthorized escalated privileges. Any additional software installed on a PC increases the chances that a user or hacker might compromise a system, so in high security environments, it makes sense to limit the installed software base to an absolute minimum. For the rest of us, while there’s always the possibility that a least-privilege product could introduce a security vulnerability to our systems, running with administrative privileges is far riskier.

No comments: