Win 11 system requirements and compatibility talk

Started 6 months ago | Discussions thread
Sean Nelson
Sean Nelson Forum Pro • Posts: 14,994
Re: Will security requirements help with ransomware protection?
2

Morris0 wrote:

Sean Nelson wrote:

Controlled Folder Access is a mitigation strategy for this issue. The idea is that only the executables that you explicitly give permission to can write to your folders. An executable that's not on the white list is prevented from writing to your data folders even though it has your account credentials which would otherwise allow access.

The onus is then on you to know which programs you trust and which ones you don't.

If you think about it, the malware got on your system and possibly in a protected folder.

I'm not quite sure where you got that from, but let's assume that you authorized your mail program to write into your controlled folders (pretty likely), and that when you clicked on an attachment it somehow got a executable into the protected folder. Or you did something similar with a web browser.

Even though the executable has gotten into the protected folder it still can't write anything to the folder without flashing up a security message saying that program X in folder Y was blocked from access. That's your opportunity to spot the attack and deal with it.

This won't stop a buffer overflow attack where, say, clicking on a link exploits a browser vulnerability that lets some specially crafted data overwrite code inside the browser, because as far as the system is concerned that bad code is part of the browser, which is authorized.

But it stops any attack that depends on tricking you into running a malicious executable, and those are pretty numerous.  It's often easier to trick the user into doing the wrong thing than it is to trick code.

Post (hide subjects) Posted by
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
MOD Austinian
Keyboard shortcuts:
FForum PPrevious NNext WNext unread UUpvote SSubscribe RReply QQuote BBookmark MMy threads
Color scheme? Blue / Yellow