LWN.net Logo

Updating IE is a non-trivial process

Updating IE is a non-trivial process

Posted Apr 21, 2005 21:35 UTC (Thu) by mchristensen (guest, #4955)
In reply to: Updating IE is a non-trivial process by simon_kitching
Parent article: Security in Firefox

I'm not a fan of IE, but this is just technically inaccurate.

Upgrading IE does not upgrade the windows kernel. It does however, upgrade a core piece of the “Windows Operating System,” because it forms a significant chunk of the standard Windows API. But that does not mean that it is in the kernel.

Microsoft uses this distinction to their advantage all the time. It's an important part of the Operating System when they are asked to remove it, but then when somebody complains about security Microsoft will tell you it's not part of the kernel.

Since it forms a core piece of the Windows API, many desktop apps (and the file browser) depend on it, and it needs to be tested as you describe. However, the kernel itself does not change when you upgrade IE.

The bigest problem is that it runs under a system account with all kinds of “unnecessary” privileges.

--Mark Ramm-Christensen


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds