Symantec's UAC Worries Challenged

Let's note this passage about what would have to happen *first*:

"The most likely scenario is that a user gets compromised by malicious code, from a Trojan [horse] or a vulnerability in a third-party application like Office or a browser."

Oh, the awe a magician can inspire after "The Magic Rooting" takes place. The UAC would, of course, prevent this from happening in the first place. I also doubt the "magic assumptions" of "most users would just click through without a second thought."

Just the fact that all this really exploits is some presumed difference in user behavior between a teal prompt and a yellow-orange prompt shows how lame this really is.

That assumption itself is questionable because if a user with admin credentials is smart enough to know the difference between the two colors and prudent enough to take different actions based on color would they really be lame enough to download an unknown file from an unknown web site, click past all the other prompts, including one asking them to "run a legacy CPL elevated?" I doubt it.