Aaron Margosis' "Non-Admin" WebLog

I do a lot of presentations on how to identify and fix "LUA bugs" in applications (*), both for Windows XP and Windows Vista. I frequently use a little VB6 application to demonstrate writing to var...

LUA Buglight is a utility that helps identify "LUA bugs" in applications -- application features that that fail as standard user but that work as administrator. I work on it in my spare time, so pr...

@font-face {
font-family: Cambria Math;
}
@font-face {
font-family: Segoe UI;
}
@font-face {
font-family: Verdana;
}
@page Section1 {size: 11.0in 8.5in; margin: 1.0in 1.0in 1.0in 1.0in; }
P.Mso...

I recently switched internet service providers, not realizing when I did that PrivBar and MakeMeAdmin would suddenly disappear from the internet when they un-provisioned my space on their servers. ...

Attached to this blog post is a PREVIEW VERSION of LUA Buglight 2.0. LUA Buglight is a utility that helps identify "LUA bugs" in desktop applications -- the bugs that appear when the application is...

In case I actually have any fans that are interested in things I've written outside of this blog (must be sick people)... I recently contributed a sidebar to the cover story of this month's TechNet...

I recently did a TechNet webcast about the upcoming LUA Buglight 2.0.
You can view the webcast here, and download the slides here.

I'm speaking at Tech*Ed North America 2008, during the "IT Professionals" week, June 10-13. I'll be presenting SIX (6) sessions, all on non-admin / least-privilege and the resulting application com...

One reason why apps have security bugs -- because we developers were trained to focus on and typically only ever focused on how legitimate users will use the product -- we never used to have to thi...

This is the first time I have blogged here about something other than running with least privilege. It's about a neat trick, though, that can be useful for some people.
If you need to shut down th...