<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Microsoft Will Never Understand Usability &#8211; Vista Device Driver Security Example</title>
	<atom:link href="http://www.breakitdownblog.com/microsoft-will-never-understand-usability-vista-device-driver-security-example/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.breakitdownblog.com/microsoft-will-never-understand-usability-vista-device-driver-security-example/</link>
	<description>A technical, gaming and current-events news site</description>
	<lastBuildDate>Sat, 21 Nov 2009 15:00:42 -0500</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.6</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Z2K9: 30GB Zunes Everywhere Locking Up for the New Year &#124; The "Break it Down" Blog</title>
		<link>http://www.breakitdownblog.com/microsoft-will-never-understand-usability-vista-device-driver-security-example/comment-page-1/#comment-13506</link>
		<dc:creator>Z2K9: 30GB Zunes Everywhere Locking Up for the New Year &#124; The "Break it Down" Blog</dc:creator>
		<pubDate>Wed, 31 Dec 2008 15:16:06 +0000</pubDate>
		<guid isPermaLink="false">http://www.breakitdownblog.com/?p=4843#comment-13506</guid>
		<description>[...] all knew Vista sucked&#8230; pretty bad&#8230; but this is really something, to get unified hardware failure in sync across the globe. [...]</description>
		<content:encoded><![CDATA[<p>[...] all knew Vista sucked&#8230; pretty bad&#8230; but this is really something, to get unified hardware failure in sync across the globe. [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Laurence Hartje</title>
		<link>http://www.breakitdownblog.com/microsoft-will-never-understand-usability-vista-device-driver-security-example/comment-page-1/#comment-12290</link>
		<dc:creator>Laurence Hartje</dc:creator>
		<pubDate>Mon, 17 Nov 2008 23:46:11 +0000</pubDate>
		<guid isPermaLink="false">http://www.breakitdownblog.com/?p=4843#comment-12290</guid>
		<description>Yeah, the dialog could be more helpful, but the issue is that when dealing with unsigned drivers/executables all bets are off. 
When something goes outside the trust model, there is no safe way to trust it. About all you could show is the process information from the process that launched the driver install -- but if the executable is unsigned, then you can&#039;t trust the validity of that information as well -- I could create a &quot;WindowsSecurityUpdate.exe&quot; by &quot;Microsoft&quot; :).

I&#039;m more inclined to yell at the manufacturer for not signing the driver (as a side note, this driver WILL NOT INSTALL on X64 versions of Windows, as Vista X64 will not allow installation of unsigned drivers). That way you bypass the issue completely (scary dialog and all). When you become a bed-mate of Microsoft, you need to play by their rules (and pay your dues).

As much as the cancel default frustrates me as well (I&#039;m a heavy keyboard user and have been nailed numerous times by the window-grabs-focus-and-cancel-is-default-and-gets-nailed-by-what-I&#039;m-typing-to-another-window), having cancel as the default makes much more sense than OK. What if that was an &quot;Application is trying to format your hard drive&quot; prompt (ok pretty ridiculous, but it could have been a prompt for a disastrous system change)? I&#039;d rather have to re-install an unsigned driver than have to recover from backup because I was typing into a chat window ;).

Laurence</description>
		<content:encoded><![CDATA[<p>Yeah, the dialog could be more helpful, but the issue is that when dealing with unsigned drivers/executables all bets are off.<br />
When something goes outside the trust model, there is no safe way to trust it. About all you could show is the process information from the process that launched the driver install &#8212; but if the executable is unsigned, then you can&#8217;t trust the validity of that information as well &#8212; I could create a &#8220;WindowsSecurityUpdate.exe&#8221; by &#8220;Microsoft&#8221; <img src='http://www.breakitdownblog.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> .</p>
<p>I&#8217;m more inclined to yell at the manufacturer for not signing the driver (as a side note, this driver WILL NOT INSTALL on X64 versions of Windows, as Vista X64 will not allow installation of unsigned drivers). That way you bypass the issue completely (scary dialog and all). When you become a bed-mate of Microsoft, you need to play by their rules (and pay your dues).</p>
<p>As much as the cancel default frustrates me as well (I&#8217;m a heavy keyboard user and have been nailed numerous times by the window-grabs-focus-and-cancel-is-default-and-gets-nailed-by-what-I&#8217;m-typing-to-another-window), having cancel as the default makes much more sense than OK. What if that was an &#8220;Application is trying to format your hard drive&#8221; prompt (ok pretty ridiculous, but it could have been a prompt for a disastrous system change)? I&#8217;d rather have to re-install an unsigned driver than have to recover from backup because I was typing into a chat window <img src='http://www.breakitdownblog.com/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> .</p>
<p>Laurence</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Riyad Kalla</title>
		<link>http://www.breakitdownblog.com/microsoft-will-never-understand-usability-vista-device-driver-security-example/comment-page-1/#comment-12287</link>
		<dc:creator>Riyad Kalla</dc:creator>
		<pubDate>Mon, 17 Nov 2008 20:55:40 +0000</pubDate>
		<guid isPermaLink="false">http://www.breakitdownblog.com/?p=4843#comment-12287</guid>
		<description>Laurence,

An awesome followup. From what you said it does sound like there is still an opportunity to display more information about the drive and *not* focus that &quot;No don&#039;t install&quot; box immediately on fire up.

As far as Grandma/Grandpa understanding, I don&#039;t expect them too, but I surely expect &quot;More details&quot; to display details... not just a cookie cutter sentence.

My point being that given all the security issues you raised (thanks for posting the ref) there are still about 9 better ways to display/inform and prompt users for action on this, and in true MS fashion, they&#039;ve picked the least helpful. Even as an educated user (well, let&#039;s say &#039;competent&#039;) I am given no choice to learn more about the driver. 

I don&#039;t think that&#039;s helpful.

I imagine you would have felt a similar way if you were at home trying to figure out &quot;Why am I getting this prompt?&quot;, no?</description>
		<content:encoded><![CDATA[<p>Laurence,</p>
<p>An awesome followup. From what you said it does sound like there is still an opportunity to display more information about the drive and *not* focus that &#8220;No don&#8217;t install&#8221; box immediately on fire up.</p>
<p>As far as Grandma/Grandpa understanding, I don&#8217;t expect them too, but I surely expect &#8220;More details&#8221; to display details&#8230; not just a cookie cutter sentence.</p>
<p>My point being that given all the security issues you raised (thanks for posting the ref) there are still about 9 better ways to display/inform and prompt users for action on this, and in true MS fashion, they&#8217;ve picked the least helpful. Even as an educated user (well, let&#8217;s say &#8216;competent&#8217;) I am given no choice to learn more about the driver. </p>
<p>I don&#8217;t think that&#8217;s helpful.</p>
<p>I imagine you would have felt a similar way if you were at home trying to figure out &#8220;Why am I getting this prompt?&#8221;, no?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Laurence Hartje</title>
		<link>http://www.breakitdownblog.com/microsoft-will-never-understand-usability-vista-device-driver-security-example/comment-page-1/#comment-12286</link>
		<dc:creator>Laurence Hartje</dc:creator>
		<pubDate>Mon, 17 Nov 2008 20:42:15 +0000</pubDate>
		<guid isPermaLink="false">http://www.breakitdownblog.com/?p=4843#comment-12286</guid>
		<description>I think you do not see the information for an unsigned driver is by design. Since the driver is unsigned, the information contained in the manifest is not verifiable and therefore untrusted. I could write &quot;keystrokelogger.sys&quot; and add &quot;Microsoft Corp.&quot; as the publisher, and when you went to install it, it would prompt that the unsigned driver was published by Microsoft. Do you trust Mom and Grandpa to understand the trustworthy a signed driver is vs. a unsigned driver? (no, the computer should &quot;just work&quot;)

You can see that MS changes information presented in the UAC elevation prompts -- Mark Russinovich covered this feature at http://technet.microsoft.com/en-us/magazine/cc138019.aspx 

Check out how the details that are displayed in the popup window are dependant on the signature type of executable (about 1/2 way down the page). I quote: 

&quot;The elevation dialog shows the image’s icon, description, and publisher for digitally signed images, but only a generic icon, the file name, and &quot;Unidentified Publisher&quot; for unsigned images. This makes it harder for malware to mimic the appearance of legitimate software.&quot;

Hence why your unsigned driver dialog doesn&#039;t trust the information passed to it.

Laurence</description>
		<content:encoded><![CDATA[<p>I think you do not see the information for an unsigned driver is by design. Since the driver is unsigned, the information contained in the manifest is not verifiable and therefore untrusted. I could write &#8220;keystrokelogger.sys&#8221; and add &#8220;Microsoft Corp.&#8221; as the publisher, and when you went to install it, it would prompt that the unsigned driver was published by Microsoft. Do you trust Mom and Grandpa to understand the trustworthy a signed driver is vs. a unsigned driver? (no, the computer should &#8220;just work&#8221;)</p>
<p>You can see that MS changes information presented in the UAC elevation prompts &#8212; Mark Russinovich covered this feature at <a href="http://technet.microsoft.com/en-us/magazine/cc138019.aspx" rel="nofollow">http://technet.microsoft.com/en-us/magazine/cc138019.aspx</a> </p>
<p>Check out how the details that are displayed in the popup window are dependant on the signature type of executable (about 1/2 way down the page). I quote: </p>
<p>&#8220;The elevation dialog shows the image’s icon, description, and publisher for digitally signed images, but only a generic icon, the file name, and &#8220;Unidentified Publisher&#8221; for unsigned images. This makes it harder for malware to mimic the appearance of legitimate software.&#8221;</p>
<p>Hence why your unsigned driver dialog doesn&#8217;t trust the information passed to it.</p>
<p>Laurence</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Riyad Kalla</title>
		<link>http://www.breakitdownblog.com/microsoft-will-never-understand-usability-vista-device-driver-security-example/comment-page-1/#comment-12285</link>
		<dc:creator>Riyad Kalla</dc:creator>
		<pubDate>Mon, 17 Nov 2008 20:00:10 +0000</pubDate>
		<guid isPermaLink="false">http://www.breakitdownblog.com/?p=4843#comment-12285</guid>
		<description>tdod,

That honestly never crossed my mind before until you just typed that... I think you are on to something, because a lot of this retardation is some of the most-complained about bugs that they just refuse to fix. Before Mac came out and gave them a run for their money, I can only imagine what Vista was going to be... maybe just a reskinned Windows ME, who knows :(</description>
		<content:encoded><![CDATA[<p>tdod,</p>
<p>That honestly never crossed my mind before until you just typed that&#8230; I think you are on to something, because a lot of this retardation is some of the most-complained about bugs that they just refuse to fix. Before Mac came out and gave them a run for their money, I can only imagine what Vista was going to be&#8230; maybe just a reskinned Windows ME, who knows <img src='http://www.breakitdownblog.com/wp-includes/images/smilies/icon_sad.gif' alt=':(' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: tdod</title>
		<link>http://www.breakitdownblog.com/microsoft-will-never-understand-usability-vista-device-driver-security-example/comment-page-1/#comment-12284</link>
		<dc:creator>tdod</dc:creator>
		<pubDate>Mon, 17 Nov 2008 19:54:43 +0000</pubDate>
		<guid isPermaLink="false">http://www.breakitdownblog.com/?p=4843#comment-12284</guid>
		<description>I have come to the conclusion that such sillyness from a Microsoft OS is actually by design.  That way, some people will always buy the next MS OS hoping that some of these annoying things will be fixed.  Who knows, it seems to be working for them so far... right?</description>
		<content:encoded><![CDATA[<p>I have come to the conclusion that such sillyness from a Microsoft OS is actually by design.  That way, some people will always buy the next MS OS hoping that some of these annoying things will be fixed.  Who knows, it seems to be working for them so far&#8230; right?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Microsoft Vista (Backup) Review: A Lesson in Stupidity &#124; The "Break it Down" Blog</title>
		<link>http://www.breakitdownblog.com/microsoft-will-never-understand-usability-vista-device-driver-security-example/comment-page-1/#comment-12275</link>
		<dc:creator>Microsoft Vista (Backup) Review: A Lesson in Stupidity &#124; The "Break it Down" Blog</dc:creator>
		<pubDate>Mon, 17 Nov 2008 17:45:12 +0000</pubDate>
		<guid isPermaLink="false">http://www.breakitdownblog.com/?p=4843#comment-12275</guid>
		<description>[...] #1:We&#8217;ve added another article evaluating the stupidity that is Microsoft and Vista by analyzing the Device Driver Security dialog as well. The reason Apple and Mac OS X are so famous is only because Microsoft [...]</description>
		<content:encoded><![CDATA[<p>[...] #1:We&#8217;ve added another article evaluating the stupidity that is Microsoft and Vista by analyzing the Device Driver Security dialog as well. The reason Apple and Mac OS X are so famous is only because Microsoft [...]</p>
]]></content:encoded>
	</item>
</channel>
</rss>
