Slashdot Mirror
Windows 10 Enterprise Getting 'InPrivate Desktop' Sandboxed Execution Feature (bleepingcomputer.com)
An anonymous reader quotes a report from Bleeping Computer: A recent Windows 10 Insider Feedback Hub quest revealed that Microsoft is developing a new throwaway sandboxed desktop feature called "InPrivate Desktop." This feature will allow administrators to run untrusted executables in a secure sandbox without fear that it can make any changes to the operating system or system's files. This quest is no longer available in the Feedback Hub, but according to it's description, this feature is being targeted at Windows 10 Enterprise and requires at least 4 GB of RAM, 5 GB of free disk space, 2 CPU cores, and CPU virtualization enabled in the BIOS. It does not indicate if Hyper-V needs to be installed or not, but as the app requires admin privileges to install some features, it could be that Hyper-V will be enabled. "InPrivate Desktop (Preview) provides admins a way to launch a throwaway sandbox for secure, one-time execution of untrusted software," the Feedback Hub questions explains. "This is basically an in-box, speedy VM that is recycled when you close the app!"
Something upbeat about another redmond fart
From an impressively bad "source", like bleepingcomputer
By one of the three most inane slashdot editors ever.
Three marks out of five.
(The other marks would be involving "hackers" and painting a SJW-theme.)
Dude comitted securities fraud lol
This is exactly what bromium have been doing for years now:
bromium.com
regards
John Jones
indeed, Linux is hot fucking garbage
I'm a BSD/Linux head from way way back. No way would I run it for clients at a company over about 20 people. I do IT operations for a 90,000 user international 120 year old French company, I might know what I'm talking about.
-- I have a private email server in my basement.
You aren't OP. Or are you using sock puppets?
Linux is a kernel. A.distribution is an operating system. Debian is certainly consistent across the versions, and so is SLED or RHEL. Linux is also consistent with itself in this regard, sometimes painfully so.
it's an administrator's job to know how to install and maintain software. Once a company decides to use a particular OS, it will be consistent across the company. Simple as that. The end user has to know only how to click on things and how to type in things, and that hasn't changed for a generation.
All the problems that you describe are certainly not corporate problems. They are problems of a distro-hopper who is not inclined to learn the concepts behind the technology.
or maybe just you are
Agreed. There is a hyper focus on more mobile for the customer experience but think of the power you could unleash turning that UX focus towards line of business enterprise applications. Stop building browser based applications and start building cross platform mobile apps.
I object to power without constructive purpose. --Spock
As bad as Microsoft is, this is total bullshit. Linux on the desktop is not a viable alternative for enterprise. Many people in desk jobs can barely learn to right click something.
And yet, here you are: a moron on the Internet, that's largely running on Linux servers, with a myriad of Web UIs that a very different from each other.
You were able to even post a comment.
If random idiots can figure out how to use a website, they can figure out how to use a different desktop.
exploitacitis stupidicous a new disease that the dipsh!ts at MS want you to pay to get targeted on a virtual server that then oh nvm they just wont learn fuck them and everyone that uses it
rest of you get to pay monthly for using none of this and unless hollywood , the us govt and ms want you to use shit ....you cant thus according to this statement
are they saying if i want to design something and not get there god damn permission i cant
GO FUCK YOURSELF MS
OK, serious question - how exactly are you managing the ever-shifting versions and their environments from XP-specific apps to ever-migrating methods of app data exchange?
I'm serious - bad as Linux is, at least you have some modicum of control over your destiny vs just blindly following MS, n'est pas?
But it has it up the wazoo.
So it's like an ephemeral ec2? Which has been around for a while.
Rowhammer, Spectre, Meltdown and all of their variants didn't just disappear. In fact they will likely get replaced by new versions of themselves in new operating systems. Each one of those can be used by malevolent software to break out of a sandbox.
Also the Windows API is vast and was not meant to have security in mind. For example usually every application can fill out forms in every other application. That way you can inject code. The timer message, which everyone can send, includes a "callback" field, which contains an address your software will very likely ignore all the security warnings around it and just call that address. If you put the address of the data of the input field you have just overwritten in, you get clean and simple code execution by seemingly harmless features.
Not op. But you just quit bitching and do it.
Sites who have problems with MS software are too scared about telling people no.
But random idiots CAN'T figure out how to use a website, that's why a lot of people think the only thing on the web is Facebook, Twitter and Instagram.
-=This sig has nothing to do with my comment. Move along now=-
wait .. isnt that the only thing on the web?
Hi,
Thanks for sharing this blog with us, your blog contains very important information about Windows 10, I appreciate your work and effort. Please keep sharing more blogs.
Just like RAID is not a backup solution,
virtualization is not a security solution.
You still need an application firewall.
Why did you write all that crap? It's all wrong.
Linux is fine. Yes each distribution tends to have it's own set of quirks, that's why you chose one or two to work with, depending on how well they work for the tasks you're using them for. Whether there are hundred distributions or not is completely irrelevant. In fact it's so irrelevant that anyone bringing it up is to be considered a concern troll, and little else. And no, that "inconsistency" has nothing to with the lack of market share on the desktop, it's just another red herring. Inertia, resistance to change, fear of the unknown, lack of support from the hardware AND software business combined with active sabotage from the incumbents goes a LOT further to explain that lack of progress than any imagined "inconsistency".
Inconsistency again, is mostly an empty barrel being beaten by people who would like to scare off people from giving Linux a go. It's also completely ignoring the fact that consistency is a joke everywhere else. Just look at Windows, the interface is inconsistent, it frequently changes wildly between releases, and lately it's become a complete joke which not only hides important information from you, it literally leads you in circles when you're trying to find things. And that's just the OS. Add in the applications where not even Microsoft's own applications are consistent and you have an unholy mess. And yet you somehow claim this is superior? You're either suffering from a severe case of Stockholm syndrome, or you're a liar.
Comparing with Apple isn't relevant, because Apple at one point WAS pretty dominant in certain markets, and as such probably have more support from and general mind-share in the hard- and software manufacturers on the desktop than Linux, barring some kind of divine intervention, will ever have. It's pretty hard to blame Linux for e.g Adobe not porting their software to it. After all others have tried, but they all suffered from being marginal two bit players whose products were mostly redundant in anyway, so their lack of success isn't particularly relevant. The point is that they did it, and it worked well. Yet you manage to put the blame for this on "Linux". I'm getting the feeling you're either not very bright or quite dishonest.
Your "answer" is just more blame shifting. What it would probably take is someone with huge financial muscles getting behind Linux, and really pushing it. For instance; Adobe getting behind a distribution, like Suse, porting their software to QT and then start selling it as a package with a certified combination of hardware and software, and letting people buy it at a lower price than if they go for Windows or Apple. Of course Microsoft wouldn't allow that, and Adobe is too cheap to do it, but things like that is what it would take. As of now, Linux growth is relying on enterprising, curious individuals with enough skills to make things work on their own, and we all know such people doesn't grow on trees. It's also fighting decision makers being stuck in their ways and frequently getting big "kickbacks" for making the "right" choices. Nobody pays you to chose Linux. And that's why it isn't growing very fast.
But random idiots CAN'T figure out how to use a website, that's why a lot of people think the only thing on the web is Facebook, Twitter and Instagram.
link
dumbass.
> This feature will allow administrators to run untrusted executables in a secure sandbox without fear [...]
Windows administrators don't fear anything. That's why they are Windows administrators!
It can't be legit, there's no Slashdot on that list! :)
All those barely babbling users seem to manage Apple and Android phones and tablets just fine. Sorry, this argument holds no water.
Part of the reluctance to move to Linux is the lack of good developer tools.
Someone probably spewed coffee when they read that, but it's true. On Windows you can grab Visual Studio and build a GUI in WPF with a backend database incredibly easily. In C# there is a library for everything, but of course even if they work under Mono they won't have been tested properly. Need cloud? A couple of clicks and you are running on Azure.
Sure, Linux is great if you want to write C++ or Python and don't mind manually managing your Qt GUI and manually connecting your database to it. From a business perspective this makes no sense. They have to hire more expensive developers to do the same job more slowly.
It's easy to laugh at a deranged baboon screaming "developers developers developers" on stage, but the Microsoft development ecosystem is actually pretty good and not just because of Windows' popularity.
const int one = 65536; (Silvermoon, Texture.cs)
SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
luckily people like you don't work in real enterprises to make such brain dead decisions, windows is still the only viable desktop for the vast majority of organisations and only the ill informed or zealots make idiotic statements like yours.
That is the sort of zealotry and ignorant rhetoric that turns people away from the open source community, you do no one any favours with your blinkered approach to the world.
Nope, it's not true.
There are plenty of good tools. What there is a lack of is people who can or want to use them. The biggest obstacle to changing people over to Linux I've ever encountered are people simply feeling threatened by the thought of leaving their well known old environment behind, pissing their pants and getting angry because they are scared. Frequently combined with others who might lose kickbacks etc. Completely different thing.
Complaining about lack of tools is ridiculous.
Hmmm!?
Yes it is. Seriously.
Every Linux distro is transforming - rapidly! - into a clone of Donald Trump. Soon we will be inundated with Trump. Trump in your computer, Trump in the server room, everything running on Trump.
It's yuge.
So why in the world would you run a untrusted executable in the first place? So you can run a potentially malware invested EXE in a sandbox. That's like telling a driver to drive recklessly because we installed more air bags.
I work at a University, and we use Windows 10 Education. Will the Sandboxed Execution Feature be enabled/available for Education edition of Windows?
There are plenty of good tools. What there is a lack of is people who can or want to use them.
People don't seem to have trouble using Visual Studio. If they have trouble using the tools on Linux, then they're not as usable by definition. QED, coward. Not a Windows fan here, BTW. I use Win7 because I want to play games, but if I want to do serious things, I boot Linux.
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
I use VS Code from Microsoft. I love it. It's light weight enough to be useful without a lot of work and powerful enough to get my job done. I used it when I had a windows 10 notebook, I used it on my ubuntu Dell notebook, and I use it now in my new role with my macbook pro.
This is exactly what every good administrator, and most good power users, have been doing for years now with VirtualBox or something similar. And with significantly less resources required on the computer to do it, I might add.
Typical Microsoft. Take something everyone already does. Add the ability to do it in Windows automatically, but require more resources than it already takes. Drive the sales of new hardware, computer manufacturers are happy, Microsoft is happy. If adoption isn't high enough, then they start interfering with the old ways users were already doing it.
And they wonder why they are constantly accused of not innovating.
Nope, it's not true.
There are plenty of good tools. What there is a lack of is people who can or want to use them. The biggest obstacle to changing people over to Linux I've ever encountered are people simply feeling threatened by the thought of leaving their well known old environment behind, pissing their pants and getting angry because they are scared. Frequently combined with others who might lose kickbacks etc. Completely different thing.
Complaining about lack of tools is ridiculous.
Thanks for the info. I am convinced and will imediately switch to the tools you named in your informative post.
Linux is a pile of shit
Case closed
Here is the problem...distros are so far apart from each other that, outside of the command line, the interface does not behave in similar fashion. Even on the command line, distros still keep their goodies in different locations. Which is fine for most tech-heads because they already live on the command line.
But if you've got Suzy in accounting who needs to check her email and copy values over to her spreadsheet and then make a presentation for the executive team, if you change how one little piece of her world works, her whole day is shot and she's a hot mess. You don't want to be the hell desk guy on the other end of that call.
Windows is great for Suzy because as soon as she learns how to do something, it doesn't matter whether she is on her machine or Pete's machine, she can get her work done. And her "hot mess" days are planned for in advance with the release of new versions of her flagship applications and operating system, so she can take a week at a camp or seminar to learn the new features and functions before she has to use them.
Getting developers from different distros to agree with each other is like trying to get cats to all walk in the same direction. You can do it, but the amount of effort you have to expend to do it would even make Ghandi contemplate murder as a better option. Until you can get these wonk-heads to fit in the same room and finally form a coalition, the chances of seeing a Linux desktop take over from Windows is fleeting at best.
If so, then they can hardly be called "private."
No, he forgot Xhamster. Now that's everything.
I dunno. There's no rc.local on Ubuntu anymore? Does systemd do it somehow? (Don't tell me to use "start up apps", that doesn't fucking work either) Jesus, DD-WRT v24 has a better UI.
Cool, but I'm not renting my OS
I was running SUSE desktops for 40+ users mostly browser-based internal app and a custom C++ app, imaging via dd and PXE boot/tftp in 2003. It was possible, and we migrated from Windows XP over 2 months, working. All the usual OOO and stuff working , SMB shares from the preexisting Windows Server while we moved SMTP to a RHEL box
But constant complaints from management that they, they, didn't have the apps they wanted, like Office. And Outlook. Those we reverted back to XP, no big deal, except for the dev having to compile the C++ app more than twice, I dunno, ask HIM, he was a prima donna.
Mind you, the company annoyed their single, sole customer to the point of rejection, and I did not get my last paycheck cashed, but that was before systemd so no doubt it was another Linux desktop failure. /s
It can and is being done, but it requires almost as much learning as Windows does for enterprise deployment. Running everything on your Linux desktop in jail is a start, properly managing user rights, and SSH for administration, collapsing into very limited images, and deciding in advance on your shared resources and not changing them too often sure helps, but we are still in the position where no one loses their job buying IBM hardware and Microsoft software in enterprise situations.
Sure makes more sense than trying to use Apple in the enterprise for anything except creative roles.
deleting the extra space after periods so i can stay relevant, yeah.
Linux at the server level is a no-brainer. Even if you're running massive databases, nothing in the Microsoft orbit can claim to be so superior to open source , no, they can't. I live with a Cassandra system, and it is not the db engine that is the problem. They would have the same problems with MariaDB, MongoDB, Oracle, SQL Server, or DB2. We left Hadoop a while ago.
But the desktop user is different, and comparisons are pointless. Server side apps are different. That space is a real catfight between Microsoft and open source, and Microsoft is facing competition from the big cloud gang, though they are cloud-ing everything they can to keep up.
Claiming users can learn a different desktop, so Linux wins, kinda ignores the transtions from WIndows 3.x to NT to 2000 to 95/XP to Vista/7/8 to now Windows 10. Users *have* learned new desktops. If you leave the exit buttons on the right-hand side of window you solve 90% of that pain... The rest is manageable. Not much harder than dealing with KDE/Gnome/XFCE, and certainly simpler than moving to MacOS.
deleting the extra space after periods so i can stay relevant, yeah.
Can we put that in isolation? Better yet get microsoft to turn off the evil parts of windows 10?
I'll be dumping lin-sux immediately as soon as this is available and so will millions more users!
Just another layer of crap. Isn't this what a proper OS is supposed to do? You know, divide up computer resources between various applications in a secure way. If you can't trust the OS to do that, how are you going to trust yet another layer of crap?
I disagree.
Linux has it's place, but as an end user desktop in a production environment it's severely lacking. Software support for it is immature at best for the vast majority of products, and arcane at worst.
When it comes to web servers, I'll take linux in nearly every application of it, but when it comes to a corporate internal network? You're using windows.
But if you are forced by vendor to distrohopping from XP to w200 to Vista to W7 to W8 to W8.1 to W10.
Begging the question much? There is something called "willingness to learn". You can make the best tools in the world, but if the people who you make them for just starts crying and flat refuse any kind of change any talk of "usability" is literally meaningless.
You see, you arrogant little prick, there's a difference between something being good, and being what people want. People usually want what they have always had, it's a well known psychological thing. Linux and the tools on it run into that wall all the time. It doesn't mean they are bad, or in your parlance "not as usable". It means they are different and people are whiny little bitches who detest different. Hence xenophobia etc. Please do try to open some books some time. Maybe you'll get to be more educated that way. Not that would think so, but hope springs eternal, they say. Maybe you even learn what QED means. LOL.
What? Like WIndows 10?
You see, you arrogant little prick, there's a difference between something being good, and being what people want.
In this case, there is no difference. Nor is there any difference between you and a cowardly wanker.
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
It's okay APK you don't need to hide. Remember your are the tough guy and can kick Mohammad I'm Hard Bruce Lee's ass. I bet you can even fight off 500 ninjas at a time.
And since most of linux is gnu software we should call linux distros GNU/Linux because Stallman said so?
Buillshit.
If the problem is, as the OP asserted, the availability and usability of the tools required, that's a problem which can be solved.
If the problem is that people flat out refuse to use anything and everything, no matter what, that isn't Windows or VS because it isn't Windows and it isn't VS or Outlook or whatever, then the problem is - per definition - unsolvable rendering any blabbering about tools or usability completely irrelevant.
IME the latter problem is the most common by far.
Not that I expect you to be able to admit to being wrong, ever.
Slow roll out. Active Directory. LanDesk Manager. Heterogeneous environment (same OS, same versions of clientware, same models of client hardware. Running IT/IS under ITIL methods. If you don't do enterprise IT then you might not be aware of all the tools out there to help.
-- I have a private email server in my basement.
Exactly. Doesn't matter which platform you use, enterprise is non-trivial when done correctly. One nice thing about the Microsoft environment is you can mostly buy your way out of any jam via M$ or consultants. Also everything works with Microsoft. I have 34TB of archived mail on Symantec Enterprise Vault. It mostly supports Domino, until you want to extract. Then it's to the cmd line and half the time it locks up the indexer. The "Sure we support Domino" often turns out to be "we have a ten year old script people say they've got working."
-- I have a private email server in my basement.
If the problem is, as the OP asserted, the availability and usability of the tools required, that's a problem which can be solved.
Can be solved != will be solved or has been solved, so your comment is irrelevant.
If the problem is that people flat out refuse to use anything and everything, no matter what, that isn't Windows or VS because it isn't Windows and it isn't VS or Outlook or whatever,
If that were the problem, you'd have a point. It isn't. Visual Studio is not only broadly considered to be the best IDE for developing Windows software, but one of the best native IDEs period — usually, the best.
IME the latter problem is the most common by far.
Your opinion is irrelevant when compared to the opinions of many, more more people than you, who say otherwise.
Not that I expect you to be able to admit to being wrong, ever.
That's because you're unfamiliar with my posting history. I have done many times. But I bet you're too cowardly to find that out using google.
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
I see the secret meaning in the headline...
Windows. Execution. Feature.
I'm starting to get really tempted to change from Windows 7 to 10. If they just gave back privacy stuff and made Windows classic theme (win 95 theme) possible I might do it.