Hacker News Reader

Putting a file into "that dir" also requires elevated permissions.

(e.g. C:\Program Files\VSTPlugins )

Of course but the point is I do that myself. Installer just asks for permissions and does who knows what.

Then the binary does who knows what so in any case you are kind of bound to your trust in the vendor.

Plugins themselves never require admin access to run, the installer does.

Unless you are running your plugins in a sandbox or have different profiles for different usages, this doesn't make any difference as what is more important, your personal data is accessible from your main user.

Anyone producing music from qubesOS?

Are you saying it makes no difference whether process runs as root or normal user in whatever OS you're on?

I am saying it depends of the attack scenario.

Privilege escalation is a big issue for servers and mutualized systems. On a personal computer this is the least of your concerns as your personnal data is more valuable than some binaries in your root filesystem. People are ready to get their precious data pwned or ransomwared but are afraid some process would get root access, this is backwards thinking.

In many systems today an app is sandboxed and doesn't get full disk access unless it's granted. But installer gets full access, since it can plug the password into su/sudo and do whatever.

Reply on news.ycombinator.com