13xforever / ps3-disc-dumper

A handy utility to make decrypted PS3 disc dumps
MIT License
508 stars 34 forks source link

"Please do not run software as Administrator..." preventing from program execution unnecessarily #34

Closed egdose closed 1 year ago

egdose commented 1 year ago

I'm working on a Windows 10 machine with only one user profile (Administrator). I have UAC disabled on my system (personal preference). I'm not sure if it means that it'll always run programs as administrator, but as far as I know, the program requests for rights it needs, and UAC appears once those rights get to admin territory.

Coming to the issue, I can't seem to be able to execute the dumper program because I always get that error. I think there needs to be an option where I should be able to acknowledge that I know I'm running this program as administrator, and I will bare the consequences if there are any. I hope it makes sense.

I'll try to create a pull request to fix this issue. Let me know if there is anything more to discuss; I'm happy to discuss in the comments here.

13xforever commented 1 year ago

UAC prevents users with admin privileges to run code with said privileges unless program requests elevation, at which point it presents the elevation dialog to the user. If you have UAC disabled, you run everything with admin perms and there's no way to drop them through normal means.

The check as implemented is designed to prevent this software to be used in the manner you're describing. You're violating all good security practices and recommendations by using the built-in Administrator account and by disabling UAC completely.

There will not be an option to disable this behavior through easily accessible means. If you want to shoot yourself in the foot, there's already a way, but you'll have to work it out yourself and use it at your own discretion.

13xforever commented 1 year ago

Unless you can provide logs and reproducible setup where this behaves in the way it was not designed, this issue is invalid.

egdose commented 1 year ago

I'll try this again after enabling UAC. Thanks for the response.

egdose commented 1 year ago

Yeah that checks out, enabling UAC allows it to run the program. I didn't know that before.

Thanks anyway!

ElektroStudios commented 8 months ago

Workaround to bypass restrictions (it works on an Administrator / built-in Administrator account with UAC disabled):

  1. Download PSExec from SysInternals.
  2. Run PSExec with this command:
    • PSExec.exe -l "ps3-disc-dumper.exe"
ElektroStudios commented 8 months ago

UAC prevents users with admin privileges to run code with said privileges unless program requests elevation, at which point it presents the elevation dialog to the user. If you have UAC disabled, you run everything with admin perms and there's no way to drop them through normal means.

The check as implemented is designed to prevent this software to be used in the manner you're describing. You're violating all good security practices and recommendations by using the built-in Administrator account and by disabling UAC completely.

There will not be an option to disable this behavior through easily accessible means. If you want to shoot yourself in the foot, there's already a way, but you'll have to work it out yourself and use it at your own discretion.

The only thing you achieve this way is generate rejection and animosity.

You should not use your program to try to "educate" users or interfere with their lives and preferences. Everything you have said in that comment is a very subjective opinion, and debatable. An advanced user with neurons functioning in the brain does not need to have UAC activated. It all depends, and there may be a thousand reasons for it.

So you should limit yourself to offering functionality through software, and then if you want you can start UAC awareness campaigns, but not through your software in a forced, intrusive, and pedantic way with those types of comments.

Believe me, I don't "shoot myself in the foot," but you do.

Without acrimony. Bye.

13xforever commented 8 months ago

That's the third time you say "bye", but you keep spamming your own opinions, so I'll help you a bit.