Comment by Zak | Hacker News Reader

Comment by Zak | Hacker News Reader

Parent Full thread

Please forgive any errors here: Windows has never been my primary OS.

Windows NT has had users and permissions providing similar functionality to what Unix offers for a very long time[0]. NT ACLs have actually been more sophisticated than standard Unix permissions for at least ten years.

The problem on Windows is the defaults and the behavior of third-party developers. Windows developers worked for a long time with the expectation that the system was single-user (Win9x) or that the user had administrator privileges, making doing anything else annoying at best. XP defaulted to making everybody an administrator, at least in the home edition. That has changed with Vista and Win7.

[0] I think some versions targeted at home users do not expose the full ACL functionality.

Have you ever tried to use Windows as a limited user? It's a nightmare. It's "supported" but I can't imagine they actually expect people to use it that way.

Why is the first account you create an admin account by default. If they wanted the use-case that you imply is supported, they would have you create an administrator account and then would ask you to create a regular user to use day-to-day.

Or they would more fully embrace the su/sudo routine that linux uses.

Re-read the comment you replied to. You haven't addressed it at all.

Edit: Also, UAC is basically sudo.

Really? Windows 7 still makes users Admins by default, doesn't warn you against it. Single limited users are still restricted to the point of in-usability requiring the the UI and all apps run at administrator level, defeating any security principles.

UAC is defective from the standpoint that every school and corporation I've been at disable it, and those that done click Accept every time without reading or considering what they're clicking on. I understand this is partly a user problem, but damn, I'll do one tiny thing before remembering to disable it and I have to Accept 30 things before I'm done.

Reply on news.ycombinator.com