About

I am a software developer in Seattle, building a new AI software company.

Ads

August 2009

Sun Mon Tue Wed Thu Fri Sat
            1
2 3 4 5 6 7 8
9 10 11 12 13 14 15
16 17 18 19 20 21 22
23 24 25 26 27 28 29
30 31          

Ads


« Virtual PC | Main | Nullable Types in C# »

May 22, 2004

Comments

steve (in the uk)

Yes, thats right, I remember seeing those Active Desktop flag settings, they let you have running animations as a desktop background - I haven't been looking at Longhorn, I am to tied up in working at the moment, my XP Pro keeps me going. Anything good coming along?

Xofis

Hover activate and single click launch is actually really useful. Effortless UI. I've had it turned on for years.

Robert Scoble

The technology failed because it was too complex (translation it was buggy and crashed my system so I turned it off).

Here's more details, and what I'd like to see instead: http://radio.weblogs.com/0001011/2004/05/22.html#a7532

Stephane Rodriguez


"Longhorn applications and pages can launch from the web into a secure sandbox using .NET code access security mechanism."

Why should such complex descriptions when everyone understands what a Java applet, and that's the best analogy you can come up with.
Security wise, I am not sure what you mean. Provided the applet is signed, you can perform all sort ofnasty things. What does it take for a singed applet to get file I/O access ? Only the click of a OK button at startup. If you remember well, 99% of users click OK because they just don't want to see the warning.
The same applies for CLR hosted applets.

Wesner Moise

Code access security in .NET is fine-grain. If any application requires certain permissions, Longhorn will inform the user of the app's need and allow the user to decide.

Even if the applet is signed, it is not allowed to do anything that it is explicit forbidden to do such as access the file system without using isolated storage.

Stephane Rodriguez


"Even if the applet is signed, it is not allowed to do anything that it is explicit forbidden to do such as access the file system without using isolated storage."

Yes, unfortunately, I suspect the security enforcement is soon turn off. Either of the following are reasons why : 1) the equivalent of administrative rights will have to be enforced by users on an individual basis since 1.1) not all software will be rewritten only to run on the .NET code stack 1.2) a lot of software out there do more than outputting strings in a command line (the kind of .NET code you see in many places). Those software products need access to the low level anyway. 2) You have the P/Invoke-COM- tyrany and all the implications for the user's ability to execute unsafe code.

To make a long story short, .NET is not ready yet. It will take an entire OS .NET stack before things can get properly done and executed in the so-called sandbox. Are we there yet, I'll let you decide. Side effect, the "n+1 is better" syndrome.

The comments to this entry are closed.