UWP Windows allow hackers to empty you hard

Microsoft states that apps published to the Microsoft Store, (UWP from Universal Windows ), are the safest solution as they protect against any malware that targets Win32 software.UWP

One of the reasons why UWP apps are recommended is that they run on a sandbox, which means that malware is theoretically impossible to get to your data because sandbox blocks access to other files.

From a technical point of view, Microsoft allows Sandbox UWP applications to access the other files stored on the hard disk with the broadFileSystemAccess API.

This is needed by some UWP apps that need to save files to system disks, and load documents or other operations with data to the . However, the API displays a warning whenever applications require file access. So the they can block apps they think might contain malware.

But let's see what the problem is. This warning can be blocked and does not appear, such as he revealed Windows developer Sebastien Lachance. In an analysis of , the developer explains that the warning could be bypassed by hackers, which allows them to gain access to data on your computer without your knowledge.

Microsoft has recognized the error and apparently fixed it in Windows 10 October 2018 (version 1809) which does not work.

So, although there is a solution ready, no one can use it for the time being, until the company officially releases (again) Windows 10 October 2018 Update.
_________________________

iGuRu.gr The Best Technology Site in Greecefgns

every publication, directly to your inbox

Join the 2.100 registrants.

Written by giorgos

George still wonders what he's doing here ...

Leave a reply

Your email address is not published. Required fields are mentioned with *

Your message will not be published if:
1. Contains insulting, defamatory, racist, offensive or inappropriate comments.
2. Causes harm to minors.
3. It interferes with the privacy and individual and social rights of other users.
4. Advertises products or services or websites.
5. Contains personal information (address, phone, etc.).