RE: [Full-Disclosure] IE Web Browser: "Sitting Duck"

From: joe (mvp_at_joeware.net)
Date: 07/08/04

  • Next message: Paul Szabo: "[Full-Disclosure] Eudora 6.1.2 attachment spoof"
    To: <FULL-DISCLOSURE@lists.netsys.com>
    Date: Wed, 7 Jul 2004 18:16:42 -0400
    
    

    In lines with this email thread and if anyone is interested in playing with
    an alternate shell... I went poking around and found what looks to be an
    interesting GNU replacement shell. Note that they specifically point out
    this isn't for novice users.

    You can find info at http://lsdocs.shellfront.org/ ,
    http://www.lsdev.org/news.php , and http://www.litestep.net

    It has build instructions available for VS6/7.1 and Dev-c++/MinGW.

     joe

    -----Original Message-----
    From: full-disclosure-admin@lists.netsys.com
    [mailto:full-disclosure-admin@lists.netsys.com] On Behalf Of joe
    Sent: Wednesday, July 07, 2004 12:20 PM
    To: FULL-DISCLOSURE@lists.netsys.com
    Subject: RE: [Full-Disclosure] IE Web Browser: "Sitting Duck"

    Actually MS does support the use of alternative shells. However you couldn't
    and shouldn't expect that if you have a say Thunderbird shell that MS would
    support that shell, just the pinnings under it. Just like they don't support
    say, Lotus, but they do support the underlying OS API calls.

    As for breaking things, it goes back to the same DLL point. If an app is
    built on the concept that that shell would be there and has dependencies on
    it, yes it will break. The only thing I can say to that is yeah, of course.
    Most of the GUI admin tools from MS depend on those shell dependencies,
    again, to that I say... Of course. However if you want to write your own,
    you can. The Windows API core pieces are still there and fully exposed and
    you don't have to use the Shell API calls and avoid the Shell DLLs. It will
    take you a bit longer to write anything though I would expect unless you
    have already built up your own lib.

    There are many embedded and POS and other machines running Windows and not
    using the Explorer shell. They are still called Windows machines.

      joe

     

    -----Original Message-----
    From: full-disclosure-admin@lists.netsys.com
    [mailto:full-disclosure-admin@lists.netsys.com] On Behalf Of Barry
    Fitzgerald
    Sent: Wednesday, July 07, 2004 9:56 AM
    To: joe
    Cc: FULL-DISCLOSURE@lists.netsys.com
    Subject: Re: [Full-Disclosure] IE Web Browser: "Sitting Duck"

    joe wrote:

    >It is a core component of the current Windows UI, this is not the same
    >as being a core component of Windows. Explorer is simply a UI shell
    >that sits on the operating system known as Windows. The entire shell is
    >replaceable and has been for a long time, since at least Win3.1.
    >
    >
    >

    I appreciate the technical explanation even though I knew, well, all and
    more of it.

    You probably could have saved some time if you had read my relatively short
    message fully and seen that I did acknowledge that IE is not part of the
    kernel (which is really what you're trying to say) and that it's a part of
    MS Windows as a software distribution. I'm fully aware that you can replace
    the shell in windows.

    However, IE and the windows UI is a part of MS Windows as a software
    distribution and it's an essential part. I dare say that if you remove the
    UI and DLLs of MS Windows, all you have left is a relatively crappy kernel
    with a lot of software that won't work.

    The MS Windows UI and Internet Explorer are a core part of the MS Windows
    operating system. When you remove them, you break compatibility with many
    of the available programs and I'd venture to say that Microsoft would not
    support a highly modified system like the ones that you're describing.

    One can remove the Glibc from any GNU/Linux distribution. I wish them luck
    trying to run programs that are dynamically linked.

    Is the Glibc a core part of Linux the kernel? Of course not.

    Is the Glibc a core part of the GNU/Linux OS distribution? Yes, it is.

    I think that for all of the technical explanations that you've given, you're
    losing the argument on one simple phrase: software distribution.

                    -Barry

    p.s. Come on people. We went through the "what does an OS really
    constitute?" argument back in like 1996. This isn't bloody kindergarten.

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html


  • Next message: Paul Szabo: "[Full-Disclosure] Eudora 6.1.2 attachment spoof"

    Relevant Pages

    • My recent Epiphany about operating systems
      ... In Winblow$, the release & bundling of IE was purposely as crippleware, virus, & bug delivery system 2 trap people into constantly 'upgrading'. ... A simple comparisson of Windows 95 side-by-side with the final Windows ME & various IE 'upgrades' illustrates how the supposedly 'new & improved' stuff is actually about 1/5 the speed, ... The OS Kernels are designed to require constant patching or nothing runs properly when 'upgrading' softwares. ... Just like M$ writes Windoze 2 B full of bugs, so they can keep selling the same crap over & over "oh but we fixed it this time" - yeah right:)) I am still using the shell from Windows95. ...
      (freebsd-questions)
    • Re: My recent Epiphany about operating systems
      ... In Winblow$, the release & bundling of IE was purposely as crippleware, ... & bug delivery system 2 trap people into constantly 'upgrading'. ... simple comparisson of Windows 95 side-by-side with the final Windows ME & ... AND fast shell that Microsoft has released. ...
      (freebsd-questions)
    • Re: My recent Epiphany about operating systems
      ... simple comparisson of Windows 95 side-by-side with the final Windows ME & ... properly when 'upgrading' softwares. ... but the configuration to be a complete nightmare so as to create a need for ... AND fast shell that Microsoft has released. ...
      (freebsd-questions)
    • Re: Custom shell window management
      ... have multiple non-modal windows, then click on the 'background' shell ... app, all of the spawned windows are 'hidden' behind the shell. ... that seem common to custom shell creation. ...
      (microsoft.public.windowsxp.embedded)
    • Re: [announcement] SYSAPI and SYSSVC for Windows
      ... Graphics on XP is managed by DirectX, GDI+, ... The Shell is handled by various components, ... and used by parts of the Windows Explorer and the Help subsystem. ... Microsoft seems to work on the next generation of graphical user ...
      (comp.lang.ada)