3 ms·
I didn't know Autorun was removed (sort of) in Windows 7. I guess that's one less thing some of us can brag about. It's hard to understand how Autorun survive
by thought_alarm 16y ago
I didn't know Autorun was removed (sort of) in Windows 7. I guess that's one less thing some of us can brag about.
It's hard to understand how Autorun survived Microsoft's big security push in the mid-2000s. I would have guessed it would be the first thing to go.
But they can't remove Autorun without severely breaking backward compatibility; you can't suddenly force users to locate SETUP.EXE in a sea of weird setup files in order to install Office. That's why it's still enabled for CDs and DVDs. As a result, Microsoft and its users continue to pay a price for what turned out to be a really terrible design decision.
- deleted 16y ago[deleted]
- larsberg 16y agoThe push only involved auditing use of APIs. High-level decisions were, generally, not re-thought. For a more concrete example, if you were hosting IE within a window of your process, you had to harden the heck out of anything that IE could host, how it accessed URLs and the hosting environment, etc. But, nobody was going to ask you WHY you were hosting IE in the first place.