> As I commented in another answer, Chrome doesn't install in the "usual"
> locations.  Check:
> 
>   c:\users\<username>\AppData\Local\Google\Chrome\Application
> 
> This doesn't require elevated privs, because the directory structure is
> owned by the user.  The same applies to XP as well, it'll install it in
> the docs and settings folder instead.

Ahh.
Yes, so it does not require elevated privs.  But I still expected nothing
should run at all without confirmation.  You don't need elevated privs to
delete all my files, or read my mail, or send mail on my behalf, or popup
windows with porn in them...

I'm not sure if you need elevation to log my keystrokes or otherwise capture
my credit card info.

Clearly, if bad guys can repeat what Google did, there is a lot to risk
here.  They would only need to get you to click one link, which looked legit
at the time.

_______________________________________________
Discuss mailing list
Discuss@lopsa.org
http://lopsa.org/cgi-bin/mailman/listinfo/discuss
This list provided by the League of Professional System Administrators
 http://lopsa.org/

Reply via email to