A Razer Synapse zero-day vulnerability has been disclosed on Twitter, allowing you to gain Windows admin privileges simply by plugging in a Razer mouse or keyboard.
It's basically a single binary choice between "don't allow this program to do anything and it won't function" and "give this program root privileges to do literally anything to the computer including installing rootkits and viewing the memory of every process". Oh, and you have to grant those permissions for every single installer that wants to put a program on your computer. And you have to pay Microsoft a ton of money if you are a developer and want to let the user know they're installing your program specifically.
On their info page for UAC:
Windows 10 heuristically detects installation programs and requests administrator credentials or approval from the administrator user in order to run with access privileges. Windows 10 also heuristically detects updates and programs that uninstall applications.
HEURISTICALLY!! COMPUTERS SHOULDN'T USE HEURISTICS!!!
deleted by creator
It's basically a single binary choice between "don't allow this program to do anything and it won't function" and "give this program root privileges to do literally anything to the computer including installing rootkits and viewing the memory of every process". Oh, and you have to grant those permissions for every single installer that wants to put a program on your computer. And you have to pay Microsoft a ton of money if you are a developer and want to let the user know they're installing your program specifically.
On their info page for UAC:
HEURISTICALLY!! COMPUTERS SHOULDN'T USE HEURISTICS!!!
deleted by creator
deleted by creator