UWP Windows allow hackers to empty you hard

Η Microsoft αναφέρει ότι οι εφαρμογές που δημοσιεύονται στο Microsoft Store, (UWP από το Universal Windows Platform), αποτελούν την ασφαλέστερη λύση, καθώς προστατεύονται από κάθε software that targets Win32 software.UWP

One of the reasons why UWP apps are recommended is that they run on a sandbox, which means that malware is theoretically impossible to get to your data because sandbox blocks access to other files.

From a technical point of view, Microsoft allows Sandbox UWP applications to access the other files stored on the hard disk with the broadFileSystemAccess API.

This is needed by some UWP apps that need to save files to system disks, and load documents or other with computer data. However, the API displays a warning whenever applications require file access. So the they can block apps they think might contain malware.

But let's see what the problem is. This warning can be blocked and does not appear, such as he revealed Windows Sebastien Lachance developer. In an error analysis, the developer explains that the warning could be bypassed by hackers, which allows them to access the data on your computer without you knowing it.

Microsoft has acknowledged the bug and apparently fixed it in the Update (version 1809) not working.

So, although there is a solution ready, no one can use it for the time being, until the company officially releases (again) Windows 10 October 2018 Update.
_________________________

iGuRu.gr The Best Technology Site in Greecefgns

every publication, directly to your inbox

Join the 2.087 registrants.

Written by giorgos

George still wonders what he's doing here ...

Leave a reply

Your email address is not published. Required fields are mentioned with *

Your message will not be published if:
1. Contains insulting, defamatory, racist, offensive or inappropriate comments.
2. Causes harm to minors.
3. It interferes with the privacy and individual and social rights of other users.
4. Advertises products or services or websites.
5. Contains personal information (address, phone, etc.).