Apps can only access files with the same file type association? What about generic text editors? SSH clients? :/
Microsoft unveils sandbox boundaries for Windows 8/Metro developers
11–20 of 29 posts
Re: Microsoft unveils sandbox boundaries for Windows 8/Metro developers
#12One upside of this is that it looks like they're really pushing the one-click installs. It isn't apt or yum, but it's certainly better than what Windows has now..
With every release, Windows has made this basic function (organizing applications) a bigger pain in the ass. If Microsoft is going to start enforcing policies, then this should be one: No application can simply barf a bunch of crap into your Start menu without ASKING where you want it to go.
Re: Microsoft unveils sandbox boundaries for Windows 8/Metro developers
#13"While it is possible to hide or obfuscate calls to APIs that are not included in the SDK, this is still a violation of customer expectations and Store policy." Wait, does the platform not include a sandbox to make sure this doesn't happen? What "security" can you expect to get out of such a platform?
Third parties could figure out that private API and call it themselves.
I do not think it is practical to defend the system against thos. Moving that base class into the kernel takes performance and includes its own security risks. Shipping multiple versions of the OS with different layouts or even implementations for such subclasses might help a bit, but also would open the system for bugs that show up on only 1/N of the machines.
Re: Microsoft unveils sandbox boundaries for Windows 8/Metro developers
#14"While it is possible to hide or obfuscate calls to APIs that are not included in the SDK, this is still a violation of customer expectations and Store policy." Wait, does the platform not include a sandbox to make sure this doesn't happen? What "security" can you expect to get out of such a platform?
isn't it the same that happens on iOS ?
http://daringfireball.net/2008/11/google_mobile_uses_private...
(Disclaimer: I work for Microsoft, though not on Windows.)
Re: Microsoft unveils sandbox boundaries for Windows 8/Metro developers
#15One upside of this is that it looks like they're really pushing the one-click installs. It isn't apt or yum, but it's certainly better than what Windows has now..
How? Windows installation has been fine for a decade and a half. Actually, it's going BACKWARD, with vendors now not bothering to ask you WHERE you want application links stored and instead littering your machine's program menu with endless directories named after themselves. Who the hell organizes their applications by vendor? I want my graphics apps together, my audio apps in another group, general office-type apps…
Re: Microsoft unveils sandbox boundaries for Windows 8/Metro developers
#16"While it is possible to hide or obfuscate calls to APIs that are not included in the SDK, this is still a violation of customer expectations and Store policy." Wait, does the platform not include a sandbox to make sure this doesn't happen? What "security" can you expect to get out of such a platform?
Re: Microsoft unveils sandbox boundaries for Windows 8/Metro developers
#17Earlier quoted context omitted.
Windows 8 Metro apps can be written in real C++. How could they sandbox a custom C++ app? There's no virtual machine to do it. http://msdn.microsoft.com/en-us/library/windows/apps/hh46504...
It's C++/CX. It's not just "real C++".
Re: Microsoft unveils sandbox boundaries for Windows 8/Metro developers
#18"While it is possible to hide or obfuscate calls to APIs that are not included in the SDK, this is still a violation of customer expectations and Store policy." Wait, does the platform not include a sandbox to make sure this doesn't happen? What "security" can you expect to get out of such a platform?
Windows 8 Metro apps can be written in real C++. How could they sandbox a custom C++ app? There's no virtual machine to do it. http://msdn.microsoft.com/en-us/library/windows/apps/hh46504...
They could use NaCl [1] or develop a similar SFI technology just for Windows.
Re: Microsoft unveils sandbox boundaries for Windows 8/Metro developers
#19Given the average response i've heard from end-users however, i somewhat doubt this. Most people i've talked to simply hate metro. Looking at other app stores, most reviews i've seen are low quality and emotionally driven.
Will be interesting to see how it all pans out.
Re: Microsoft unveils sandbox boundaries for Windows 8/Metro developers
#20"While it is possible to hide or obfuscate calls to APIs that are not included in the SDK, this is still a violation of customer expectations and Store policy." Wait, does the platform not include a sandbox to make sure this doesn't happen? What "security" can you expect to get out of such a platform?
Windows 8 Metro apps can be written in real C++. How could they sandbox a custom C++ app? There's no virtual machine to do it. http://msdn.microsoft.com/en-us/library/windows/apps/hh46504...