Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Full details on CVE-2015-0096 and the failed MS10-046 Stuxnet fix

h30499.www3.hp.com

Post reply on HN
Print view View original

1–10 of 17 posts

Re: Full details on CVE-2015-0096 and the failed MS10-046 Stuxnet fix

#5

Post by UnoriginalGuy »

upofadown wrote: post #4

So Windows can run code simply by browsing to a directory with the default shell? I have no words...

Windows has a bug which was likely a design decision made in Windows 95 development (maybe earlier, Windows 3.1 had CPL applets also). Security wasn't taken as seriously in that era.

While evidently their bug fix was a little hacky, I guess re-designing how Control Panel applet icons are rendered was considered too big of a change for what was essentially a security patch.

Hopefully they kill classic Control Panel completely at some stage in the next few years. Windows 8, 8.1, and now 10 are going down that road but there are a lot of legacy Control Panel applets by third parties which they have to deal with somehow.

Re: Full details on CVE-2015-0096 and the failed MS10-046 Stuxnet fix

#6

Post by Already__Taken »

UnoriginalGuy wrote: post #5
upofadown wrote: post #4

So Windows can run code simply by browsing to a directory with the default shell? I have no words...

Windows has a bug which was likely a design decision made in Windows 95 development (maybe earlier, Windows 3.1 had CPL applets also). Security wasn't taken as seriously in that era. While evidently their bug fix was a little hacky, I guess re-designing how Control Panel applet icons are rendered was considered too big of a change for what was essentially a security patch. Hopefully they kill classic Control Panel co…

Windows needed to kill the legacy control panel for a long time. They've put some new (worse)) front ends to it over time but once you click down to it there's some ancient non-resizable textarea to read something important in.

They should rebuild it in something powershell can poke so every single windows setting can be done from the command line, slap a gui on top of that and manage it all with DSC. Much like how all the new server orientated features have gone.

Re: Full details on CVE-2015-0096 and the failed MS10-046 Stuxnet fix

#8

Post by TazeTSchnitzel »

cm2187 wrote: post #2

Out of curiosity, does anyone understand why it was a good idea in the first place to have icons pointing to a DLL instead of having a static icon name or icon id?

Well, the reason for having it was for Control Panel items. In such cases, you'd want the icon in sync with the Control Panel item's. Windows, in general, likes to keep its icons in one place and then reference them from somewhere.

Re: Full details on CVE-2015-0096 and the failed MS10-046 Stuxnet fix

#9

Post by TazeTSchnitzel »

UnoriginalGuy wrote: post #5
upofadown wrote: post #4

So Windows can run code simply by browsing to a directory with the default shell? I have no words...

Windows has a bug which was likely a design decision made in Windows 95 development (maybe earlier, Windows 3.1 had CPL applets also). Security wasn't taken as seriously in that era. While evidently their bug fix was a little hacky, I guess re-designing how Control Panel applet icons are rendered was considered too big of a change for what was essentially a security patch. Hopefully they kill classic Control Panel co…

It probably wasn't an intentional design decision. Storing icons in DLLs and referencing them is completely normal in Windows. I assume the error was that they somehow allowed the DLL to execute.
Post reply on HN