Slashdot Mirror
IE7 Separated from Windows Explorer
An anonymous reader writes "Security experts warned Microsoft 10 years ago that putting IE as a component of Windows Explorer was a bad idea, looks like Microsoft finally decided to listen to the advice. According to a short write up in Business Week, Microsoft has decided that when IE7 comes out with Vista it will no longer be a component of Windows Explorer and will be able to replace IE6 even on XP machines."
Surely they mean outwordly replace IE 6 like Firefox etc do, whilst keeping IE 6 tied into the XP system?
I wonder what would happen if you decided to remove IE 7 after installing it. Or will they "upgrade" it like they do with DirectX and Media Player (ie one way upgrades only, essentially no rolling back).
They are talking about Click to activate ActiveX controls as being a security benefit thats been added for the user - I thought it was because of losing the patent dispute?
ps, the guy talking sounds like Farnsworth, its worth listening just for that!
liqbase
I had heard initially that IE7 wasn't going to be available for Windows 2000, and assumed that meant it wasn't going to be for XP either. If it works on XP, what would stop it from running on 2000 other than a Microsoft desire to cripple it so that people have one more reason they must leave 2000 which still works fine for most tasks [as long as it's well patched]?
Oh You POS
Didn't Microsoft engineers claim, in court, to the EU that they couldn't remove Internet Explorer from the Operating System without breaking it?
Interesting seeing as Microsoft are now suddenly able to seperate the two (in reference to Windows XP, not Windows Vista).
Another divorce. Why can't Americans just stay together for the kids?
Religion for nerds. Stuff that really matters
Will Windows Explorer still be able to function as a web browser once IE7 has been installed separately on XP?
I imagine a lot of users are quite used to typing webaddress.com into Windows Explorer, now. I suppose that should respond by launching the user's default browser with the command line argument webaddress.com, but is that what it will do, or will WinExplore still function as a browser?
Next thing you'll know, maybe they'll realize that running executables out of the browser is a bad idea, and that an arbitrary execution flaw on CD insertion is NOT a feature.
My new blog
I'm sure I'm about to burn karma with this... but in KDE, Konqueror acts as both web browser and file manager. At least it's entirely userspace, but does anyone know how closely the file managing and web browsing aspects of Konqueror are tied?
Did you hear IE7 Separated from Windows Explorer?
Yes, I also heard she is now dating some new guy Winslow Vista.
He who knows best knows how little he knows. - Thomas Jefferson
Will anyone who isn't currently using MSIE6 use MSIE7 on this news?
IE was integrated because the same kind of display used to show files and directories could be used to display web content, and it made sense to integrate the same technology in order to save on system resources.
Today, with people having more horsepower in their computer then they know what to do with, same goes for hard drive space, having a tightly integrated web browser / file browser doesn't make sense, and it has been a source of Microsoft's security problems.
Yes, you will still be able to type a web address in the file explorer in Vista and have a web page display . While explorer and internet explorer are no longer integrated, Vista will transparently switch between the applications and maintain the same window view.
I am sure that I.E. components will still be launched at system startup, to give Microsoft and edge over 3rd party browsers for quick browser launching, but by removing the integration with the file explorer, this will definitely be a welcomed change that should offer better security in the long run, which Microsoft desperitely needs.
I haven't thought of anything clever to put here, but then again most of you haven't either.
Microsoft mentioned it was due to security designs in Vista.
I doubt though that something so integrated into windows explorer can be seperated and reprogrammed into a seperate application within the extra 2 months.
Its alot of work not to mention may break many applications. For example cdroms that use autoplay sometimes display html and javascript in the windows explorer menu in a seperate pane. I suppose you could reprogram windows explorer to just call an IE7.dll to display it.
But Microsoft was found guilty of merging IE into a million libraries so third party apps would not function without IE and infact required it. Even a command prompt program that uses strings requires IE as a result.
Thank god I am not on the windows development team.
http://saveie6.com/
So in other words, now that they've won the browser wars at the expense of OS security, they'll unbundle it now.
It was so much nicer here in hell before it froze over.
You are correct in noting that Konq is entirely userspace, which is why they can make it browse whatever they want it to. If you don't like it, you can use Nautilus or firefox or midnight commander or any number of other things. This is only a big deal for IE/Explorer because it is tied to the OS, and because it is really your only choice for many things.
As for how tightly tied konqueror is to itself, that's pretty much moot. Much of Konqueror's capabilities are provided by kioslaves, which are another layer entirely, and could theoretically be used by other apps. *Shrug*
Yes! I can finally completely uninstall it from my system!
Actually, I'll just stick to my Mac.
http://www.microsoft.com/windows/ie/ie7/featureta
From here
http://forum.pcstats.com/showthread.php?t=35534
He he, "one quirky feature". Way to miss the point. Note that you can disable Download Signed ActiveX controls too, or make at least make it prompt you.
There's a best practices document here
http://msdn.microsoft.com/library/default.asp?url
I think the basic problem is that they still want to avoid breaking websites that rely on ActiveX as much as possible. You can see lots of stuff in that document which means that some ActiveX controls will still automatically on a webpage. If anyone develops and exploit for them and you run it on XP as an admin, you have a problem. Of course, if the user knows what they are doing they can make it secure, but the default setting is more geared to compatibility than security.
echo -e 'global _start\n _start:\n mov eax, 2\n int 80h\n jmp _start' > a.asm; nasm a.asm -f elf; ld a.o -o a;
I installed IE7 (let me explain) and the FTP functionality in it is just like directory listings like Firefox has. I use IE for ftp just so I have the ease of a Windows Explorer-like interface for FTP. So I can't do that with IE7. But, if I open windows explorer or any folder, I can put an FTP address in that address bar and it works just like IE6 with the explorer interface. Unintentionally, I found out when I installed that it kept it separate. Interesting...
Gee, how long did it take them to figure out what people knew from the beginning? Security and IT professionals have flogged this as a major security risk from day 1.
All I can say is that now that they have done this, I'm beginning to believe that they want to build a decent and secure product for their customers.
This is my sig. There are many like it but this one is mine.
I downloaed the IE7 beta 2 for XP yesterday and you can see that explorer is no longer tied at all to the web browser. Going to slashdot.org in an explorer window starts the default browser now.
The war with islam is a war on the beast
The war on terror is a war for peace
Just the other day I went to open an HTML page I'd made in IE7, to check that it rendered properly. After fumbling around for a few minutes wondering where they'd hidden the menu bar (yeah, clever one, Microsoft, give your most-used program a UI that flies in the face of 20 years of convention, and don't tell anybody you need to hit the ALT key to bring it up, that'll go down a treat with Joe User), I selected "open", browsed to the file... ...And IE7 opened the page in Firefox, my default browser!
Clever, eh?
The problem with MS's version was that the whole freaking system crashed if IE crashed.
This isn't entirely correct. EXPLORER.EXE, which is tied in with IE and is largely responsible for the GUI, can be crashed by IE. This mucks up the GUI to the point where the system is apparently hung. However, the NTOSKRNL.EXE almost never gets faulted by these kinds of crashes and, in reality, continues to run even though the interface is completely hosed. This is analogous to crashing XWindows in Unix in the sense that X can be completely hung but system processes underneath it continue to function normally. The difference is that a Ctrl-Alt-Bksp will kill X and give you a command prompt, whereas Windows has no such option. There has been talk in the past of Microsoft releasing a command-line version of Windows Server (i.e. the GUI is optional), but AFAIK, that's just been talk with no real action.
Note that crashes that do fully lock up a Windows box are almost always caused by faulty drivers, usually video drivers because these run in kernel space. Linux is just as susceptible to faulty drivers as Windows is. I've had a number of servers up and croak with a KERNEL PANIC because of a faulty RAID driver. Dodgy hardware, poor cooling, overclocking, etc. also locks up boxes but this isn't a Windows-only phenomenon by any means.
In the end they will lay their freedom at our feet and say to us, Make us your slaves, but feed us. - Fyodor Dostoyevsky