>2008 happened because clearly the banks do have that incentive. The only thing that stops them are the regulations.
It’s truly absurd to argue that banks have no incentive to limit lending to make sure they get paid back. The 2008 crisis proves no such thing. Banks simply made a lot of bad bets.
This pro-piracy nonsense is a point of faith for many nerds. They will twist themselves into pretzels to avoid the conclusion that piracy is costly and that enforcement of the law can be good.
Calculus doesn’t solve this. Creating a way to solve sums of infinite series does not itself prove anything about the mechanism of the physical world. Yes, obviously motion is possible. And 1/2 + 1/4 + 1/8 … = 1. But that doesn’t tell you how the motion can actually go through all those steps in finite time. It might very well be that the only reason the universe works is because it’s discrete, not continuous.
UAC offers almost no additional security for single user systems. You’re trying to protect your data and passwords and stuff, not the ability to install device drivers.
>I am not going to make the trojan writers job easier.
The Trojan writer now targets systems with UAC, since it’s the default and the vast majority of systems, so you’re not gaining anything. And he never needed an elevated token in the first place.
Almost all the bad things you’re worried about don’t require an elevated token. I’m much more worried about someone stealing my data, installing a trojan, etc. (none of which require elevation) than installing a device driver (which does).
This obsession with not running as root/using UAC is just cargo cult security for single user systems.
First, a bit of pedantry: UAC is not a security feature. https://devblogs.microsoft.com/oldnewthing/20160816-00/?p=94... . It just works to encourage developers to make their software work without an elevated token. The security feature is Windows administrator accounts running apps with non-elevated tokens by default.
Protecting local administrator tokens is also kind of a useless security feature these days. What are you worried about? Data theft? Ransomware? Trojans? Credentials theft? All of those can be done just fine with only standard user permissions, without an administrator token. OTOH, you need an elevated token to install device drivers or whatever.