Hello Bj?rn,
Thursday January 28 2016, Bj?rn Felten wrote to Michael Dukelsky:
MD>> Sorry, but I cannot agree. It is not good to have configuration
MD>> files and executables in one directory. Microsoft used that bad
MD>> practise in Windows 9x, but later they abandoned it.
BF> Strange. It seems to work for every other program I use on my
BF> XP-boxes as well as on my Win7-boxes.
BF> I like to have everything related to a program at one single place.
BF> What's so bad about it?
From the security point of view it is bad to run programs from an account with
administrative rights because in that case the possibility to get some malware
is higher. Therefore they advise to run programs from a restricted account.
Executables are stored in Program Files but if you work in a restricted
account, you will not be able to write to Program Files. It is done on purpose.
If you for example click by accident on a reference in a fishing e-mail message
and download and run some malware while you work in a restricted account, the
malware will not be able to infect the executables in Program Files. That is
why application store their data in %APPDATA% and not in %ProgramFiles%. You
can easily edit files there without running your editor as administrator.
Michael
... node (at) f1042 (dot) ru
--- GoldED+/LNX 1.1.5-b20151128
* Origin: Moscow, Russia (2:5020/1042)
|