Updating IE is a non-trivial process
Posted Apr 21, 2005 21:35 UTC (Thu) by mchristensen
In reply to: Updating IE is a non-trivial process
Parent article: Security in Firefox
I'm not a fan of IE, but this is just technically inaccurate.
Upgrading IE does not upgrade the windows kernel. It does however, upgrade a core piece of the Windows Operating System, because it forms a significant chunk of the standard Windows API. But that does not mean that it is in the kernel.
Microsoft uses this distinction to their advantage all the time. It's an important part of the Operating System when they are asked to remove it, but then when somebody complains about security Microsoft will tell you it's not part of the kernel.
Since it forms a core piece of the Windows API, many desktop apps (and the file browser) depend on it, and it needs to be tested as you describe. However, the kernel itself does not change when you upgrade IE.
The bigest problem is that it runs under a system account with all kinds of unnecessary privileges.
to post comments)