G
Guest
anyone notice that you can no longer drag and drop a file or folder on top of
a command window to have the path automatically entered?
a command window to have the path automatically entered?
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.
You should upgrade or use an alternative browser.
J
Jack
That was the reason I have removed Vista from my computer!
Jack
Jack
M
Mr. Vista
This was noted in the Beta stage. The response in this ng was it was
removed for "security reasons".
You can still obtain the path by Right-clicking on a folder (while holding
down the Shift key) & selecing it in the menu.
removed for "security reasons".
You can still obtain the path by Right-clicking on a folder (while holding
down the Shift key) & selecing it in the menu.
C
Colin Barnhorst
It's the same reason drag and drop is not supported in Virtual Server;
security.
security.
J
Jack
What reason?
"Security" explanation is not enough for me.
How can I know it is not a bug?
Microsoft should explain if it really cares about customers.
Jack
"Security" explanation is not enough for me.
How can I know it is not a bug?
Microsoft should explain if it really cares about customers.
Jack
C
Colin Barnhorst
It is not a bug. Security is a large issue in Vista. I don't know at what
point in a drag and drop that you could insert a UAC prompt in a command
window operation but it is apparently not a simple matter.
point in a drag and drop that you could insert a UAC prompt in a command
window operation but it is apparently not a simple matter.
M
Mr. Vista
How does dropping a file path in a Command window pertain to security?.
C
Colin Barnhorst
It is an attack surface issue. Apparently drag and drop can be used to hack
a system. Remember that Vista is used in networked environments. In order
for MS to market the client to security-minded enterprises and government
agencies it must first meet their stringent security standards.
a system. Remember that Vista is used in networked environments. In order
for MS to market the client to security-minded enterprises and government
agencies it must first meet their stringent security standards.
C
Chad Harris
This reminds me of something that came up but I didn't follow up on. In one
chat I remarked in Vista that an improvement over XP was that when you go to
right click and rename a folder, the focus is often lost so that you have to
repeat the process or many times, even when no window is open "under" the
folder you're trying to click or bordering on the space underneath it, I
have to tuck the folder or file into another folder to get it named. In
Vista, you can move windows around, or the mouse around and the focus of the
open space to rename is stable. When I made that remark, someone on a Vista
team (whichever chat) said that mouse focus can raise a significant security
issue. That point seems analagous or in the same "ball park as the one you
just made. I just didn't follow up on it fully and if I did, I wonder if it
would require coding knowledge. Probably not though.
CH
chat I remarked in Vista that an improvement over XP was that when you go to
right click and rename a folder, the focus is often lost so that you have to
repeat the process or many times, even when no window is open "under" the
folder you're trying to click or bordering on the space underneath it, I
have to tuck the folder or file into another folder to get it named. In
Vista, you can move windows around, or the mouse around and the focus of the
open space to rename is stable. When I made that remark, someone on a Vista
team (whichever chat) said that mouse focus can raise a significant security
issue. That point seems analagous or in the same "ball park as the one you
just made. I just didn't follow up on it fully and if I did, I wonder if it
would require coding knowledge. Probably not though.
CH
C
Colin Barnhorst
Interesting. Thanks for sharing that!
Chad Harris said:This reminds me of something that came up but I didn't follow up on. In
one chat I remarked in Vista that an improvement over XP was that when you
go to right click and rename a folder, the focus is often lost so that you
have to repeat the process or many times, even when no window is open
"under" the folder you're trying to click or bordering on the space
underneath it, I have to tuck the folder or file into another folder to
get it named. In Vista, you can move windows around, or the mouse around
and the focus of the open space to rename is stable. When I made that
remark, someone on a Vista team (whichever chat) said that mouse focus can
raise a significant security issue. That point seems analagous or in the
same "ball park as the one you just made. I just didn't follow up on it
fully and if I did, I wonder if it would require coding knowledge.
Probably not though.
CH
M
Mr. Vista
Can you shed any more light on this Colin.
I do not see the difference b/w dropping a folder in CMD window (to have its
path displayed) and typing the path in manually.
I can't see the security risk.
I do not see the difference b/w dropping a folder in CMD window (to have its
path displayed) and typing the path in manually.
I can't see the security risk.
C
Colin Barnhorst
You should take the question to microsoft.public.windows.vista.security.
Those folks are the experts. Also, if you are intrigued by vulnerability
issues, you should check out the monthly security webcasts. The one this
month is at
http://www.microsoft.com/events/webcasts/upcoming.mspx. Scroll down to Jan.
10 and sign up for
"TechNet Webcast: Information About Microsoft January Security Bulletins
(Level 200)."
What is great about live meeting webcasts is that you can ask the experts a
question like yours during the session. Of course you can also download and
view all the previous monthly webcasts (from the on-demand listing).
Those folks are the experts. Also, if you are intrigued by vulnerability
issues, you should check out the monthly security webcasts. The one this
month is at
http://www.microsoft.com/events/webcasts/upcoming.mspx. Scroll down to Jan.
10 and sign up for
"TechNet Webcast: Information About Microsoft January Security Bulletins
(Level 200)."
What is great about live meeting webcasts is that you can ask the experts a
question like yours during the session. Of course you can also download and
view all the previous monthly webcasts (from the on-demand listing).
Ask a Question
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.