Security concern: Installer launches browser in admin instead of user account



  • Hi, On Windows 7 Professional I work on a user account without admin privileges. Vivaldi installer asks for running as admin and [b]after it installs Vivaldi, it launches the browser on this admin account.[/b] When I close and re-open Vivaldi, it runs properly on user account, but the fact it has been run as admin for the first run is a security concern to me. User can not close Vivaldi for a long time from the first launch (sleep and wake-up system instead of shutting it down) and enter a malicious website, which will break into the browser and run a code with directly admin privileges, instead of user privileges. I hope Vivaldi Team would respond whether they consider it an issue. By the way - will it ever be possible to install Vivaldi without administrator privileges, for a USB/standalone installation? Or is it an intentional choice of developers to require them? Or maybe it is (close to) impossible to make it happen due to some requirements related with usage of Chromium?



  • These are all good points…



  • @wojcieche:

    By the way - will it ever be possible to install Vivaldi without administrator privileges, for a USB/standalone installation?

    This is kinda' possible right now - use 7-zip to unpack the install .exe. file, then unpack the contained 7z file and you can fire up Vivaldi without installing anything.

    Not sure what happens to the user profile files then, though.


Log in to reply
 

Looks like your connection to Vivaldi Forum was lost, please wait while we try to reconnect.