1 Microsoft admits Vista UAC prompts 'need work' - Security - News - ZDNet Australia

Microsoft admits Vista UAC prompts 'need work'

Get Adobe Flash player

Scott Charney, head of Microsoft's Trustworthy Computing division, admitted this week that Windows Vista's User Account Control (UAC) prompts are not intuitive and confuse users.

In a video interview with ZDNet.com.au at the AusCERT 2008 conference this week, Charney said Microsoft needs to make improvements around UAC.

"Clearly there is work that has to be done around the UAC prompts — in part because of user feedback that they get the prompts at times they don't necessarily expect them and it is not intuitive.

"If you give people too many prompts in too many situations, they view it as an impediment to getting their work done and they just start clicking ok on everything," said Charney.

He said that the language used in prompts is also confusing.

"We give them dialogues and prompts that don't help them make the right decision as often as we would like. You can be surfing the Web and get a warning that this site is out of another site's control, or you may be passing data to another site. What is a user supposed to do with that information?

"You can click cancel and not do what you were trying to do, or you can accept the risk — we need to figure out better ways to mitigate that risk but let the user achieve their objective," he added.

Charney's comments echo those of Ivan Krstić, the former director of security architecture for the One Laptop Per Child project, who opened last year's AusCERT conference by claiming that desktop security was completely broken.

In an interview with ZDNet.com.au at last year's conference, Krstić said: "If you go to a Web site whose security certificate is for any reason not checking out, you get a dialogue box that you [require] strong Internet security [skills] to decipher," he said. "For anyone else, they get to do a random guess between yes, no and cancel. That's no way to protect anyone," he added.

Krstić said software vendors were "weaselling off responsibility for security to users" in order to "legally protect themselves".

Talkback

Add your opinion

In order to post a comment, you need to be registered. (Sign In or register below)

Post your comment

Terms of Service - As a ZDNet registrant, and by using this service, you indicate that you agree to our Terms and Conditions and have read and understand our Privacy Policy.

Quick Poll

What is the biggest data management challenge in your organisation?

ZDNet Australia Live

Sutherland Shire Council is locked in a stalemate with Optus over the $110,000 cost of a cable replacement http://t.co/zxYTZaJj

Won't that improve the service? RT @zdnetaustralia: Vodafone sheds 30K more customers: http://t.co/cZtRLzPJ

RT @zdnetaustralia: Vodafone sheds 30K more customers: http://t.co/hkaD9EeK

by http://t.co/vmlQ0Ecb: Optus attacked over council cable costs: Sutherland Shire Council is locked in a stalema... http://t.co/CIwHzp5S

Surely Vodafone knew this would happen... the customers certainly did! I jumped ship as soon as I could. http://t.co/ehCrfX2T

It's pretty funny that a local council would think a verbal agreement with Optus was sufficient. http://t.co/Nasa1I9t

Vodafone sheds 30K more customers: http://t.co/hkaD9EeK

RT @zdnetaustralia: Vodafone sheds 30K more customers: http://t.co/hkaD9EeK

RT @CTAspley: Apple set to announce the iPad 3 in early March http://t.co/yTZVTkE3

Ethical iPhone protests hit Apple stores: http://t.co/MjtFB4r7

RT @zdnetaustralia: Ethical iPhone protests hit Apple stores: http://t.co/MjtFB4r7

zvelo is in the news - PC Mag http://t.co/Tg5LCQF1 PC World http://t.co/vj9siTzR ZDNet http://t.co/jkeQ8NOt c|net http://t.co/eAM1Z9nX

RT @zdnetaustralia: Kodak discontinues camera business http://t.co/jqKWDFO7 < my very first camera was a Kodak instamatic

Apple set to announce the iPad 3 in early March http://t.co/yTZVTkE3

Interpol defends voluntary filter: ZDNet Australia http://t.co/ovXm1UHb (Badly, really.)

Aussie activists call for "ethical iPhone": Activists today gathered at the Apple Store in Sydney's CBD to deliv... http://t.co/KgfQQWdu

Aussie activists call for "ethical iPhone": Activists today gathered at the Apple Store in Sydney's CBD to deliv... http://t.co/zbKQLRhX

RT @zdnetaustralia: Why a $25 computer means revolution http://t.co/ufWQdLzT

RT @zdnetaustralia: Google is reportedly getting ready to take on Dropbox with its own cloud-based storage service http://t.co/qEoMRSk4

Why a $25 computer means revolution: And just as the electronics have shrunk, so has the price — opening up the ... http://t.co/kdvMBPEm

buy convert dvd to asf to your friends

59 minutes ago by chatheli on 700MHz auction: The death knell for Aussie 4G?

Good article and some good comments guys. The lazy, monopolistic bullies that are bleating about this (TA, AFL, NRL, CA etc) need a reali...

1 hour ago by Progressive on More TV Now may mean less TV later

Lax data privacy laws hurt Australia: Australia may be setting a bad example and limiting its ... http://t.co/0OTpy0W7 #Data #Protection

The Raseberry has a great role in automating heating and cooling systems, and in process control. Just get a few termisters along with an...

1 hour ago by lsatenstein on Why a $25 computer means revolution

Ethical iPhone protests hit Apple stores http://t.co/Tg87lxA1

Why a $25 computer means revolution http://t.co/KoA6Mfnu

HRM/HCM is heating up with Oracle buying Teleo. Where's MSFT in all this?http://t.co/urUaTHc5

Lax data #privacy laws hurt Australia: Australia may be setting a bad example and limiting its options when it c... http://t.co/18CvSbms

Lax data #privacy laws hurt Australia: Australia may be setting a bad example and limiting its options when it c... http://t.co/35xWEgB2

News: Malware's the next nuclear bomb: Kaspersky - Security - News - ZDNet Australia http://t.co/MqfyXzJS

Lax data privacy laws hurt Australia - Australia may be setting a bad example and limiting its options when it comes... http://t.co/F7HQTvVy

Google readying #cloud storage service: Google is reportedly getting ready to take on Dropbox with its own cloud... http://t.co/GTFIbQC7

Lax data #privacy laws hurt Australia: Australia may be setting a bad example and limiting its options when it c... http://t.co/6q6L9DOG

Ethical iPhone protests hit Apple stores. Love your iPhone? Love it more if it is made ethically? http://t.co/LkKm9StB via @zdnetaustralia

Lax data privacy laws hurt Australia: Australia may be setting a bad example and limiting its options when it co... http://t.co/sGjo2Y6w

Ethical iPhone protests hit Apple stores http://t.co/LkKm9StB via @zdnetaustralia

RT @SecMash: Lax data privacy laws hurt Australia - ZDNet Australia http://t.co/NaFCw4Xr #InfoSec

Lax data privacy laws hurt Australia - ZDNet Australia http://t.co/NaFCw4Xr #InfoSec

invention these appreciate Every using after Numerous Not well ordering customer any custom route do make these current can consider of N...

2 hours ago by gurbapagnonna on Abetz shifted in reshuffle

I'd say a reasonable amount of it would be. In the Queensland Department of Education's case, it said it was trying to make as much of it...

3 hours ago by suzanne.tindal on The application nation

Great article, Suzanne—couldn’t agree more. It is only logical for organisations – private or public-- to take a long, hard look â€...

4 hours ago by kashe on The application nation

Every example of action against child molesters in this story related to internet protocols other than the www. This filter then achieves...

4 hours ago by Bob.H on Interpol defends voluntary filter

Soooo... it's okay for Apple to demand use of technologies and designs falling under competitors patents (considered "standards"), but on...

12 hours ago by MoWeb on Apple wants new rules for mobile patents

But I am having an intelligent conversation young fibes, my point is the lofty goal that all are equal is unfortunately not so. That is w...

14 hours ago by Doubt on NBN Co inks $620m satellite deal

May be so, but we do need to lighten up some of these people who are so serious. poor old fibretech nearly brings tears to the eyes and j...

14 hours ago by Doubt on Turnbull decries 'Rolls-Royce' satellites

The latest MS Windows update for XP tries hard to persuade you to update. For those machines that already have IE8 loaded it tries to re-...

15 hours ago by brak on Windows XP clings on as dominant OS

Will be interesting to see if he drives the qld gov political IT agenda or looks to address the IT challenges being faced by qld gov agen...

15 hours ago by Flly on Queensland's CIO returns to the post

So angry! NOKIA has forgotten the main purpose and the user function, and instead prioritised their industry level concerns. I bought my...

16 hours ago by spaceagesoup on Nokia skips Australia in Symbian Belle roll-out

I get what you mean in your context, meski. If the filter is like speed cameras, then people can alternately take side streets and back r...

17 hours ago by techkid on Interpol defends voluntary filter

Remind me again how people can get to a leadership position with absolutely no practical knowledge? I would ask Alexander how he intends...

18 hours ago by cleversoap on Internet won't always be anonymous: ITU

I was reading about DMARC at http://www.unlocktheinbox.com/resources/dmarc.aspx, perhaps they should try to implement something like this...

19 hours ago by wpfn on Phishing scam causes Telstra email woe

As you can tell, I'm a big follower. For AFL read NRL.

19 hours ago by phildobbie on The TV Now aftermath

Im not sure if David Gallop realises he now works for the AFL.

19 hours ago by katerich on The TV Now aftermath

That assumes that people see the stop sign. If you're using proxies, or whatever *all* the time, then these stop signs will never be obs...

20 hours ago by meski on Interpol defends voluntary filter

The advanced remote controlled machines reduce the human working rate from hazardous environment.

20 hours ago by Manasy on Robotic mining worth its high cost: Rio

This story has been voted 20 times in the last 24 hours!

2 days ago, Symantec confirms hacker extortion

This story has been voted 10 times in the last 24 hours!

2 days ago, Symantec confirms hacker extortion

Facebook Activity

Keep up with ZDNet Australia

ZDNet Events Calendar

ZDNet Events Calendar