The Rough Edges

The first thing that bothers us is a technical matter, and that is the addition of various levels of UAC , and the security ramifications of that. We’ve talked about this before in our look at the release candidate, but it bears repeating.

With the changes made to Windows 7, at the default UAC level of 2, signed Microsoft executables are auto-elevated to admin privileges when run by an admin. This primarily manifests itself in the Control Panel, where most of the panels are allowed to auto-elevate so that users may make changes without facing a UAC prompt.

There’s certainly a benefit to this in terms of user interaction, since the Control Panel and installing software are the two most common admin-level tasks a user will do. The latter is a repeating occurrence, but the former is something that usually only happens once when the computer is set up. So by making this change, the new-user experience involves less UAC.


The UAC Control Panel With Level Slider

It’s the security ramifications of this that concern us. Someone already managed to exploit this in the pre-RC phase (where the UAC control panel itself was auto-elevating) to disable UAC entirely. The concern we have is that all of these auto-elevating programs are an obvious target for a local privilege escalation attack to accomplish something similar, if not the same. Imagine finding a way to make the Display control panel execute a 3rd party application with admin privileges, for example.

Now to be clear, it’s not as if this is the only way to achieve local privilege escalation attacks. The Windows kernel itself is a target, and I can’t think of any major desktop OSes that haven’t seen such an attack in the past. But this makes that easier, potentially much easier. And that’s a risky proposition when a UAC prompt may be all that’s left between malware executing and running amok or not.

Certainly someone is going to bite my head off for this, but I don’t think Microsoft should have made such a fundamental change to UAC. More casual users may not have been fond of how Vista or UAC Level 3 handle security, but it was a more secure choice than Level 2. To that end, I certainly wouldn’t recommend running Win7 at the default UAC level for any computer connected to the internet.

On a lighter note, even after using the release version of Win7 for 2 months now, I’m still wondering who thought it was a good idea to make the title bar of maximized windows semi-transparent. Certainly for windowed windows it makes some sense, as you can see what’s underneath. But for maximized windows? If I was concerned for what was under the window, why would I have it maximized?

Finally there’s Windows Mail, or rather the lack of it. Obviously email clients have come under diminished importance in the last few years as web-based email (e.g. Gmail) continues to rise in popularity, but this doesn’t mean that an email client is not necessary.  And I get that Microsoft wants to separate the email client from the operating system so that they can push out major client updates outside of major OS releases.


  Windows Mail: Have you seen me?

But what I don’t get is why there’s any reason good enough for Windows to not come with an email client at all. It’s 2009, why is there an operating system being released without an email client? I only hope that OEMs are adding email clients to their prebuilt computers, otherwise there may be some very confused Windows 7 users as people start snapping up new machines.

The Only 3 Editions You’ll Care About Test Setup
Comments Locked

207 Comments

View All Comments

  • jkostans - Monday, October 26, 2009 - link

    I bought W7 Pro 64-bit OEM for $140 shipped on newegg. So far I am reasonably happy. The interface takes a lot of getting used to for someone who has been running XP since it's release. I do get some blue screens, but I've narrowed it down to an iffy 64-bit "kX Audio" driver I am using for my ancient SB Audigy.

    I definately noticed a speed improvement in general use. Everything from navigating folders to opening programs and browsing the internet seems snappier. I am running a decent setup, so maybe W7 can scale better with the additional power of todays machines. (Q6600 @ 3.4GHz, 4GB DDR2 1066 , HD4870, Spinpoint F1 7200rpm drives). I really want to see how a SSD helps performance, but I can't justify the price yet.
  • chrnochime - Tuesday, October 27, 2009 - link

    I'd say if it does scale well, your PC is provides a lot of power for it to work on. It's a quad-core OC'd to 3.4GHz, and that's far from being a slouch.

    Now to ponder over whether to wipe my HTPC clean just to install W7. No, I don't hope for smooth upgrade, never worked in the past for any Windows before, don't think it'll work for me now.
  • hydrocarbon - Monday, October 26, 2009 - link

    "Fine" is a weird term to use for 64-bit XP...
  • SunLord - Tuesday, October 27, 2009 - link

    I always wonder about these Windows XP 64bit users seeing as how it has the worst driver support out of all recent Windows version. It also was the last to get WGA support... Funny that.
  • Genx87 - Tuesday, October 27, 2009 - link

    People enjoy pain or like to be "different". The driver situation for that OS is hell and isnt going to get better.
  • falc0ne - Monday, October 26, 2009 - link

    well, dear Xp user we have a short and straight to the point answer for ya: welcome to the 21st century:)
    it's not that we don't love old machines like Pontiac Firebird but....this doesn't apply to computer hardware or software:)
  • Martimus - Tuesday, October 27, 2009 - link

    Lol. That isn't an argument. In fact, I don't even know what you are trying to convey. That Windows 7 is newer, and thus automatically better? That isn't a very logical conclusion.

    Widows XP runs most programs fine. Why would anyone want to buy a new operating system, when their old one they already paid for works? I'll buy Windows 7 when I build a new computer, but there is no compelling reason to buy it for any other reason. After reading this article, I feel less compelled to change my operating system than I did before I read it - as there just aren't any compelling features added since XP (to me).
  • B3an - Monday, November 2, 2009 - link

    XP it a decade old, it REALLY should just hurry up and die. It's holding progress back, too many installs still use IE6 which is a massive headache for web developers, and it has more holes than my socks. 7 is massive upgrade from XP, even installing 7 is infinitely easier than XP. This article fails to mention many many features of windows 7, but then it's more about performance numbers.

    Yes XP "gets the job done", so would windows 98 for many people, but stop confusing that with the OS actually being any good these days.
    7 is Microsofts best OS by far, period.
  • leexgx - Tuesday, November 3, 2009 - link

    i guess you did not even bother to read his post....

    i am guessing he has his PC fully up to date
  • samspqr - Monday, October 26, 2009 - link

    it depends on what you are doing

    I don't doubt this site does its best to get the most perfect measures of general performance, but my measuremens tell a totally different story

    if you're doing serious 3D work, using programs like 3dsmax or maya, XP is between 21% and 200% faster than vista or w7:
    http://forums.guru3d.com/showthread.php?t=307466">http://forums.guru3d.com/showthread.php?t=307466
    http://area.autodesk.com/forum/autodesk-3ds-max/in...">http://area.autodesk.com/forum/autodesk...benchmar...

    note 1: this is viewport performance; for rendering times, look at anandtech's numbers
    note 2: don't even look at specviewperf results, they are meaningless

Log in

Don't have an account? Sign up now