UWP Windows allow hackers to empty you hard

Microsoft reports that applications published in the Microsoft Store (UWP from the Universal Windows Platform) are the safest solution as they are protected against any malicious software targeting Win32 software.UWP

One of the reasons why UWP apps are recommended is that they run in a sandbox, which means that it is theoretically impossible for malware to reach because the sandbox blocks access to the rest of the files.

From point of view now, Microsoft allows UWP apps running in a sandbox to access the rest of the files stored on the hard drive with the broadFileSystemAccess API.

This is required by some UWP applications that need to store files on system drives, and load documents or other functions with data on the computer. However, the API displays a warning whenever applications require access to files. So users can block applications that they believe may contain malware.

But let's see what the problem is. This warning can be blocked and does not appear, such as he revealed Windows Sebastien Lachance developer. In an error analysis, the developer explains that the warning could be bypassed by hackers, which allows them to access the data on your computer without you knowing it.

Microsoft has acknowledged the bug and apparently fixed it in Windows 10 2018 (version 1809) which does not work.

So, although there is a solution ready, no one can use it for the time being, until the company officially releases (again) Windows 10 October 2018 Update.
_________________________

iGuRu.gr The Best Technology Site in Greecefgns

every publication, directly to your inbox

Join the 2.082 registrants.

Written by giorgos

George still wonders what he's doing here ...

Leave a reply

Your email address is not published. Required fields are mentioned with *

Your message will not be published if:
1. Contains insulting, defamatory, racist, offensive or inappropriate comments.
2. Causes harm to minors.
3. It interferes with the privacy and individual and social rights of other users.
4. Advertises products or services or websites.
5. Contains personal information (address, phone, etc.).