Groklaw - Digging for Truth

	When you want to know more...

Home
Archives
Site Map
Search
About Groklaw
Awards
Legal Research
Timelines

ApplevSamsung
ApplevSamsung p.2
ArchiveExplorer
Autozone
Bilski
Cases
Cast: Lawyers
Comes v. MS
Contracts/Documents
Courts
DRM
Gordon v MS
GPL
Grokdoc
HTML How To
IPI v RH
IV v. Google
Legal Docs
Lodsys
MS Litigations
MSvB&N
News Picks
Novell v. MS
Novell-MS Deal
ODF/OOXML
OOXML Appeals
OraclevGoogle
Patents
ProjectMonterey
Psystar
Quote Database
Red Hat v SCO
Salus Book
SCEA v Hotz
SCO Appeals
SCO Bankruptcy
SCO Financials
SCO Overview
SCO v IBM
SCO v Novell
SCO:Soup2Nuts
SCOsource
Sean Daly
Software Patents
Switch to Linux
Transcripts
Unix Books

Gear

Groklaw Gear

You won't find me on Facebook

Donate

No Legal Advice

The information on Groklaw is not intended to constitute legal advice. While Mark is a lawyer and he has asked other lawyers and law students to contribute articles, all of these articles are offered to help educate, not to provide specific legal advice. They are not your lawyers.

Here's Groklaw's comments policy.

What's New

STORIES
No new stories

COMMENTS last 48 hrs
No new comments

Sponsors

Hosting:

On servers donated to ibiblio by AMD.

Webmaster

Indeed, not a bug but a feature! | 379 comments | Create New Account

Comments belong to whoever posts them. Please notify us of inappropriate comments.

Where have you been?

Authored by: celtic_hackr on Saturday, October 13 2012 @ 12:24 AM EDT

Yes, it's all true. It came out in antitrust trials a long, long time ago.

[ Reply to This | Parent | # ]

Far more mundane attack vectors in IE

Authored by: globularity on Saturday, October 13 2012 @ 12:26 AM EDT

The usual attacks on IE involved cross zone privilege exploits and the active
scripts.
If the zones were locked down, tightly most exploits failed. Note there was a
hidden local zone with high privileges which needed registry editing to secure.
The file manager and many other applications such as outlook used the rendering
engine from IE.
It may be true that there were undocumented api's but there were more than
enough straightforward attack vectors. I blocked many filetypes at the firewall
because many would just be handed off to the OS and run without any user input.

IE was so poorly written, you could get .wsc file attached to an email in web
mail which would read the outlook address book and send a copy of the file which
contained it to everybody in the address book. A virus writers dream. Autorun
was another example of a virus writers dream function.

---
Windows vista, a marriage between operating system and trojan horse.

[ Reply to This | Parent | # ]

Indeed, not a bug but a feature!

Authored by: hardmath on Saturday, October 13 2012 @ 01:29 PM EDT

From Microsoft's point of view they wanted to argue bundling of IE with Windows was not an abuse of monopoly but an intrinsic necessity, that Windows the operating system (or operating system environment, if we speak more precisely about the DOS-legacy branch) could not run without IE.

To this end the "system tray" shown at the border of the desktop screen was actually an IE window, and crashing IE would accordingly freeze or remove the system tray.

Microsoft tried to demonstrate this dependence using what they told the court was an unedited video of booting Windows 98 without IE, but subsequently got caught in this lie.

---
Recursion is the opiate of the mathists.

[ Reply to This | Parent | # ]

Groklaw © Copyright 2003-2013 Pamela Jones.
All trademarks and copyrights on this page are owned by their respective owners.
Comments are owned by the individual posters.

PJ's articles are licensed under a Creative Commons License. ( Details )