From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id AFEE4138CBF for ; Wed, 18 Mar 2015 04:49:18 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id CD692E0AC3; Wed, 18 Mar 2015 04:49:13 +0000 (UTC) Received: from cdptpa-oedge-vip.email.rr.com (cdptpa-outbound-snat.email.rr.com [107.14.166.229]) by pigeon.gentoo.org (Postfix) with ESMTP id A5491E0AB8 for ; Wed, 18 Mar 2015 04:49:12 +0000 (UTC) Received: from [142.196.200.180] ([142.196.200.180:50040] helo=navi.localnet) by cdptpa-oedge01 (envelope-from ) (ecelerity 3.5.0.35861 r(Momo-dev:tip)) with ESMTP id 22/2F-05031-8C309055; Wed, 18 Mar 2015 04:49:12 +0000 From: Fernando Rodriguez To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Is this a bug in firefox-36.0? Date: Wed, 18 Mar 2015 00:48:52 -0400 Message-ID: <20097357.LO0PJfiPUS@navi> User-Agent: KMail/4.14.3 (Linux/3.19.1; KDE/4.14.3; x86_64; ; ) In-Reply-To: References: Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" X-RR-Connecting-IP: 107.14.168.118:25 X-Cloudmark-Score: 0 X-Archives-Salt: f6063bd1-1c23-4196-b415-6d204570385d X-Archives-Hash: 4cb81d7b07346c995f5a16e3fff524b5 On Tuesday, March 17, 2015 4:49:54 PM walt wrote: > BTW, I tried the latest firefox in a Win7 virtual machine and I was > shocked to see that firefox was updating itself when I was logged in > as an unprivileged user (i.e. *not* an Administrator). Are the idiots > at M$ *really* that stupid? They've learned nothing, apparently, since > Win 95 :( At the risk of being flamed, the security model of NT operating systems is actually far superior to that of Linux with all the disaster kits. The problem is that Windows users don't want to be bothered with security settings. When the set the default to ask for password on vista they where flooded with negative feedback. MS being a commercial company would indeed be stupid not to give them what they want. As a user you could use an unprivileged account and use runas just like sudo on Linux but that's too much for Windows users so they took it a step further, even if you got admin rights it will ask for permission (optionally password) before doing anything privileged, still users blindly click OK on those dialogs (like you did with firefox). If firefox follows MS guidelines it won't let an unpriviliged user (unless an user with admin rights explicitly sets an option allowing it, probably during install) update it even technically it can cause you allowed it to install. -- Fernando Rodriguez