Want Number Six a computer is only as secure as the administrator is trustworthy.
We've mentioned that system kernel processes are beyond any control local computers administrator is
very hard to control too.
All the measures to prevent a local computer's administrator from accessing the computers databases
usually make it more difficult but not impossible to read the data.
Unless security solutions involve encryption
the administrator can modify all processes running on the computer.
It can also monitor them.
The administrator can even read a password encrypted by external applications by retrieving it's decrypted
form from the working memory.
The password needs to be stored somewhere because otherwise any given program wouldn't recognize the
user
if the program knows the encrypted password the administrator can learn it to
process is started by the administrator administrator privileges.
This means not only that the administrator but also the process is started by the administrator have
full control over the computer.
We touched on this problem and we mentioned that users with administrator privileges should not start
programs communicating with untrusted computers.
This problem is partially solved by an Account Control.
It's a solution introduced in Windows Vista.
The principle behind it is that no matter who starts a given process there will always be started with
regular user privileges unless the user personally granted the process additional access rights until
the solution is widely used.
The sixth law is still valid.