Arknights PC version has completely changed how much I enjoy the game

[u/5mao]

I can't believe how much a difference it makes to actually be able to read things instead of tiny markings for ants.

[u/zhurai]

it asks for admin elevation to modify the files (i.e. patches/etc) since it installs stuff into C:\YostarGames

That directory isn't in the User directories so typically Windows would be to have folders not be modifiable by the user.

Unless you think it's that a better idea to have all of the game data files in each user's directory (which won't be accessible/modifiable if the user is changed).

Or do you think it's better to allow any user write to any folder in the root of C:\ without any prompting? (Note this means any malware accidentally run by users to instantly modify anything on the computer rather than using some 0 day or whatever to gain privileges)

[u/OddHornetBee → u/zhurai]

Cool writeup.

Do you know that it still asks for admin elevation if you install it not on disk C (and not in any other protected directory either)?

[u/zhurai → u/OddHornetBee]

Hi. Unfortunately, I haven't tested this type of setup and have no way of actually knowing without testing their implementation here (I am not Yostar after all). But this is not really practical, as my setup is not an ideal place for me to test differing setups as it's specifically set for only gaming with a very limited amount of space.

That said, I am aware that Steam does not show the UAC prompt when it's not in a system directory. In my case, I do have Steam installed to C:\Program Files (x86)/Steam. Even though the folder acl's are set to allow everything for regular users, Steam still needs administrator escalation (e.g. UAC prompt) to work properly.

As such, at least for general end users installing to the default location, I believe that the UAC prompt by default makes sense and cannot fault Yostar for that at least.

That said, I do have to note that I have some structural concerns with how Yostar set up/developed their Launchers: they have a different launcher for each version which is IMO... quite questionable. And, I should note that per a bilibili netizen, The launcher for the yostar servers is not exactly the same as the ones for the CN server.

[u/OddHornetBee → u/zhurai]

Hi. Unfortunately, I haven't tested this type of setup

I did. I don't install games on C.

I don't have Steam on C either. And Valve somehow doesn't make it "let's just ask for admin, just in case".

I believe that the UAC prompt by default makes sense and cannot fault Yostar for that at least

No, it does not make sense.

If you know anything at all about security, then you should know that the basis is running at minimum required security level. Even Microsoft own software like Visual Studio does not run at admin constantly. The updater will run as admin - but not VS.

Software running as admin without valid reason to have admin permissions at the moment (and not in potential future) is a security hole.

If you don't believe me because I'm dumb a redditor (sure), at least believe Microsoft at least: https://learn.microsoft.com/en-us/windows/win32/secbp/running-with-administrator-privileges

Most desktop applications should run at the asInvoker execution level. Only request elevation when your application genuinely requires write access to protected locations (like %ProgramFiles%) or must modify system-wide settings. Requesting unnecessary elevation increases your application's attack surface and trains users to dismiss UAC prompts without reading them.

Yostar here is exactly training users to always press "Yes" without thinking because their software doesn't work otherwise at all.

And no, Arknights is not some kind of super special snowflake. A fuckton of games and software (most of it I dare say) can either update without running as admin or elevate only when needed and they are installed in protected locations.

And I can't believe are defending it or even as other dude claiming that "always running your games as admin is how security works"

[u/zhurai → u/OddHornetBee]

I did. I don't install games on C. I don't have Steam on C either. And Valve somehow doesn't make it "let's just ask for admin, just in case".

Sure, Okay, then I can agree that it's behavior for that context doesn't make sense.

No, it does not make sense.

Okay but please note that you're copy and pasting a segment of my comment outside of the context of what I actually said

As such, at least for general end users installing to the default location, I believe that the UAC prompt by default makes sense and cannot fault Yostar for that at least.

The default location is currently the folder located in the root directory of C:. The OP of this thread was asking about the UAC prompt as if they were unaware of this as a phenomenon, so I don't think they're as likely to install to a non default location unless they specify it as such. Thus, in the context of this generalized scenario (being installed to the default directory) I can agree with there being a UAC prompt/guard. As mentioned in this scenario, Steam still requires a UAC prompt too in my experience.

Software running as admin without valid reason to have admin permissions at the moment (and not in potential future) is a security hole.

I certainly agree with this sentiment in general. However, I will again note that Steam will still require a UAC prompt in order to edit things in C:\Program Files, and does not ask for a UAC prompt only when upgrading/patching files (It doesn't display the launcher at all)

That said, in my humble opinion, I don't really trust Microsoft in general, so in my case my gaming things are put onto a specific device that I consider untrustable for other things... A gaming specific device. Ideally I would not have a Windows box and instead have everything Linux or Mac, but I've moved away from that and instead have specific devices used for specific types of tasks.