UAC fix in Windows 7 creates security hole, blogger says