Should Apple be making fun of Vista UAC? by ZDNet's George Ou -- Windows Vista UAC (User
Account Control) has an additional security feature called Secure Desktop that
hardens the UAC privilege escalation prompt, but some people seem to be upset
with this feature because they say it's annoying. Apple has even gone as far
as making a new TV commercial out of it with "PC" being bossed [...]
I disagree, what you have shown here is how UAC shows up when installing an
application, however installing an application on Mac OS X can be as simple as
drag and drop. Most of the software I download is downloaded in a DMG which you
can mount. I can drag it into my Applications folder, and if I have
Administrator rights, I won't get asked anything. If I don't have Administrator
rights, I can run it right from the DMG or move it into another folder in my
home directory aptly named Applications and run it from there. Mac OS X does
not ask me for a user-name and password in both those cases, whereas the UAC
will ask you if you want to run it as Administrator to install it, even if you
would like to place it on your Desktop in a folder named Program Files.
The Mac OS X commercials also seem to refer to the Windows firewall, which asks
whether you want to allow incoming or outgoing. When I ran Vista I had disabled
the firewall, so I can't say if that is true or not, however I do feel that the
Apple advertising is fair. Nothing about it is unfair. I as a user of Windows
Vista am unable to run a setup program under any user rights other than that of
an Administrator, which allows the installer full access to my entire machine,
which is unacceptable to me. In Mac OS X I can drag it to any folder and
execute it from there, and it won't have privileges above that of what the user
is running at.
Even most .pkg's in Mac OS X can be installed in an alternate location as to
not require Administrator privileges, however most if not all .pkg's are .pkg's
since they need to install something in /System which is the guts of Mac OS X.
For example, SMCFanControl requires this to install a kernel extension.