Brandon Live!

Desktop Search FAQ   |   Start++   |   Contact Me

Vista Myths: “Users will just click OK”

January 31, 2007 at 1:29 pm
Windows Vista

Today I’d like to dispel a myth about Windows Vista which says that User Account Control (UAC) will not protect users because they will just click “Continue” or “Allow” on the dialogs that ask them for permission for an application to run with Administrator privileges.

Is it a problem that users are often too willing to click Allow or Continue buttons without knowing the full consequences of their action?  Certainly.  Please don’t think I am contending otherwise.  However, consider the following scenario:

  1. Joe User starts up his Windows Vista machine and logs into an Administrator account with UAC enabled.
  2. Joe opens up Mail Program Express* - which automatically runs with reduced privileges because of UAC.
  3. Joe clicks on a malicious HTML e-mail message that triggers a buffer overrun exploit against Mail Program Express, which executes some malicious code.  Perhaps this code includes instructions to delete important system files, muck with the registry, or access sensitive information about your computer or other users of the machine.
  4. The attack against Mail Program Express succeeds, and the code is run - but the code fails to have any impact on the system because it is running in the context of Mail Program Express - which does not have Administrator privileges.

At no point during this example is a UAC dialog thrown. 

Could a more sophisticated attack cause an attempt at privilege escalation?  Depending on the nature of the attack, it’s possible.  But in such a case, the user would be presented with a UAC dialog completely out-of-the-blue.  It would probably be an unsigned app (scarier dialog), and the user would probably say no.

So what does this mean?  It means that UAC is a lot more than just another warning dialog.  Don’t turn it off.  It just might save you a lot of heartache one day.

* this could be any benign application you use daily, especially internet-connected ones like mail readers, web browsers, chat clients, etc.


Steve Wiseman’s 5 Vista gripes

January 22, 2007 at 5:58 pm
Desktop Search, Search, Windows Shell, Windows Vista

Since Steve Wiseman’s post (”The 5 sins of Vista“) doesn’t have a place for comments - I’m responding here.  Let’s go through his issues one-by-one.

1)  The new File Open dialog.

Personally, I’m a big fan.  The XP dialog had some basically hard-coded “Favorite Places” on the left-hand side, but to really customize or extend them you had to use a Stardock add-in.  There was also no functional Search capability - whereas now you can type a few characters into the Search box and find exactly what you’re looking for.

Steve’s problem?  The lack of a regular folder “tree view” - which, oddly, didn’t exist in the XP dialog either.  But wait, Vista does have it!  Just click the “Folders” header (by default, it is collapsed) and voila!  You can even resize it to be exactly how you want it. 

The Vista file open dialog with the folder tree expanded

Personally, I’m much happier with the Favorites bar, but that’s just me.  His other gripe?  Clicking the down-arrow by the address bar shows him the standard address bar history (which probably includes websites as well).  But if he would just look a couple inches to the left, he could expand one of the breadcrumbs in the breadcrumb bar and see exactly what he’s look for - in a far more useful fashion than you ever could in XP! 

The Vista file open dialog with a breadcrumb drop-down showing

Also, why have an “up” button when you have a breadcrumb bar?  You can go up a level just the same, by clicking on the parent breadcrumb, or (depending on the width of the window) you can jump multiple levels higher with a single click.  It takes a few minutes to get used to, but it makes so much more sense and really is one of my favorite improvements to file browsing in Vista.

2)  The new Start menu. 

Steve complains that typing “C:” into the start menu doesn’t open that folder, but “C:\” does.  He suggests that we should check to see if what was entered is a valid path before launching the first search result.  But that is what we do!  The problem is, “C:” isn’t a qualified path.  In fact, because the colon is a word-breaking character, it’s basically the same as just typing “C” into that field.  Could drives have been special-cased?  I suppose.  But really, if typing that extra slash is one of your top 5 gripes with Vista, I think we’re doing pretty well =)

Legacy functionality is also retained by pressing “Windows Key + R”, or by re-enabling the classic “run” box from the Start Menu advanced options.

3)  Windows Networking

I’ll agree with Steve that on first glance, you might be a bit lost in trying to figure out how to change your IP address from the Networking control panel.  Of course, going to Control Panel and typing “ip address” in the search box would get you there a lot faster =)

However, I really like the new Networking capabilities in Vista.  For one, Vista finally addressed one of my biggest desires when it comes to networking, especially for my laptop - it actually remembers settings on a per-network basis, in ways that previously required third-party software (which never seemed to do a good enough job).  In Vista, I set up a network once, and never worry about it again.  When I go to a friend’s house that I’ve been to before, the wireless connection just works.  Same when I go to Panera, or use any of the Seattle public hotspots.  Not only do I never have to be asked about connecting to a network I’ve already established as trusted, but all my network discoverability and sharing settings are remembered.  And believe it or not, the “diagnose problem” functionality in the new Network and Sharing center is really nice.  As are the yellow-band prompts that remind me I have sharing or network discovery turned off for a particular network, and give me a one-click option to enable them. 

4)  Windows Search

This entire section of Steve’s post makes no sense to me.  First of all, I’m not aware of any changes made to Windows XP’s built-in search in XP SP2.  I really can’t be sure if he’s talking about Windows Desktop Search or not, but his points don’t seem to apply either way. 

He says:  “I want a simple search program that will search for a file on my hard drive (Hint to Microsoft - Every file, not just the types you know about like Word and Excel files) that contains a specific string of letters.”

Well, fortunately, Windows Search has never been limited to Microsoft formats like Word and Excel.  In fact, Windows Search will index (or grep-search) the filenames and metadata of any files on your system, and will index the content of hundreds of filetypes out of the box.  What’s more, files can be indexed (or have their content cracked on-demand for non-indexed locations) using the standard IFilter interface, for which filters are available for most popular formats - including Adobe’s PDF format. 

It’s true that Windows Search doesn’t index your entire hard drive(s) by default.  This is done to improve performance and the quality of search results, as very, very few users want to be searching for a document and see random system DLLs show up.  However, both the indexed locations and the filetypes that are excluded are fully configurable.

More importantly, though, is how well Vista will handle non-indexed locations seamlessly.  If you initiate a search in a non-indexed location, the same IFilters used for indexing can be used to search the contents of non-indexed files (if you click the “Search in File Contents” button). 

The problem for Steve might be that he’s searching in “Indexed Locations” for items that aren’t indexed.  However, by selecting a different location in the Location drop-down, it’s easy to search anywhere and find what you’re looking for.

Searching for a non-indexed system file in Vista

5)  File copying

Steve says “I absolutely hate it when my 5000 file copy gets killed half way through because 1 single file can’t be opened.”

Lucky for him then that this exact problem was addressed in Vista!  Now, when you copy a large number of files/folders - Vista will prompt you for any permissions, overwrite requests, etc - at the start of the operation, for everything in the copy list.  It will also copy as much as it can and save any errors for the end of the operation, so that you don’t walk away and come back later to find that one little error has stopped your entire copy operation.

It also has replaced the “Yes / Yes To All / No” style options, with more descriptive options and a “Do this for all” checkbox - thus ending cries of “Where is No To All!?!?!” (which secretly could be achieved in older version of Windows by holding down the SHIFT key while pressing No).

I fully expect it to take some time before long-time Windows users adapt to the changes in Vista.  This happens every time a major OS revision occurs, especially one on such a large scale.  It is my hope, though, that people will give it a try instead of assuming that things don’t work, as it seems Steve did in a few cases.  An unprecedented amount of thought and testing went into Vista’s design changes.  Will everyone be happy with 100% of the changes?  Of course not.  But taken in aggregate, I think the net effect is an overwhelming improvement. 

I can say for my part that using an XP machine is decidedly less pleasant since I switched to using Vista on all of my machines.  I’ve already started to take some of the improvements I mentioned above for granted, and sorely missing them when they’re gone!  I’d be happy to respond to concerns from Steve or other users about how to accomplish tasks in the new shell, or about what to expect from certain features (particularly around Search) wherever I am able to.  So post your comments, concerns, and questions below!


Geek dinner tonight in Bellevue

January 19, 2007 at 3:32 pm
Other

Anita posted word of a Geek Dinner happening tonight at 7pm at Crossroads Mall.  Details here.  Not sure if I’ll make it but I may try.


Apple announces iPhone - already obsolete?

January 9, 2007 at 12:04 pm
Apple, Macintosh, News

Hey Apple - 2004 called, they want their technology back.  

Today at Macworld (which suspiciously lacked anything new about, well, Macs), Apple announced that this summer they’ll be offering the iPhone, a slick looking device that is likely to be the best blend of music player, cell phone, and PDA that we’ve seen so far.

But apparently no one at Apple has bought a cell phone since 2004.

That’s right… apparently the iPhone uses, and no I’m not joking… EDGE.  That’s right, your iPhone might as well be a dial-up modem.  Not ~800kbps like I’ve been getting from EVDO for over a year and a half, or the faster EVDO Rev A stuff rolling out now.  Definitely not the ~1mbps HSDPA / UMTS speed like all the fancy new Cingular smartphones.   Just good old 80-110kbps EDGE, a worse connection than I had on my Treo 600 in 2003.

Lame.  Really lame.  Right now I’m thinking about replacing my PPC-6700 with a BlackJack.  Nothing announced today has made me even have a second thought about that.

Looks like Michael Gartenberg agrees.


Building a Windows PowerToy

January 4, 2007 at 9:15 pm
Other

Earlier today I made my first of several posts about building a Windows Vista “PowerToy” on the Windows Shell Blog.  This first post is an introduction to what PowerToys are and a bit of history of how mine (a Windows Search gadget for the Sidebar) began.

 

Building a Windows PowerToy, part 1.


[powered by WordPress.]

Hi. I'm Brandon. I'm a geek, and I work on Search technology for Windows at Microsoft. This is my blog.

RSS Button

Picture

categories:

archives:

January 2007
M T W T F S S
« Dec   Feb »
1234567
891011121314
15161718192021
22232425262728
293031  

search this site:

The views expressed within my blog are my own - and are not in any way indicative of those of the company I work for, Microsoft, or it's employees. No warranties or other guarantees will be offered as to the quality of the opinions or anything else offered here.

Xbox Live GamerCard

Most popular searches that brought people here today:

searchfilterhost.exe (2)same serch field at
start like
(2)link start menu to
desktop
(1)MacBook +Vista
+trackpad O
(1)outlook 2007 search
in vista
(1)desktop machine (1)search in outlook
2007 does no
(1)start (1)tversity 360 vista (1)installing windows
desktop sea
(1)