chxo internets

Don’t Run as Administrator

I’m tired of the “don’t run as Administrator” dodge. Can we please bury this bit of anti Windows flamebait?

Almost everything of real value on your system is stored in your /home (or /Users) folder, including all the documents and work you’ve produced, your photos, your music, your stored passwords, your bookmarks, and your application preferences. If an attacker deletes or (worse) corrupts these files, you are going to be very sad. It won’t actually matter much that the underlying OS and applications are still in good shape.

Using your computer as non-admin is an important security layer, but it’s just the beginning of a “defense in depth” approach that includes a whole spectrum of technology and practice designed to foil attacks.