While it certainly would make no sense to our (kernel dev’s) our usage
model, given that we are a tiny percentage, we do still however need to be
able to faithfully debug things, so there has to be facilities for that that
are usable without disabling all of the security, et. c. That’s the real
trick. Just disabling all of those features when a kernel debugger is
attached (like PatchGuard) isn’t a faithful model of the system.
I would certainly agree that user’s don’t care and shouldn’t care about any
of this, but it’s their applications (in my opinion) that are the ones that
are ‘secured’ and at issue. I mean, the 64 bit build of IE is pretty close
to unusable with its default security settings (at least on the server
builds), and then there’s IE protected mode, et. c. Also, because the
attempt is to secure those applications with the least intrusion, I think
that it’s those applications that really exercise the PC. Our stuff does to
in different ways, but that’s not the stuff that’s usually at issue, in my
opinion.
Also, I’m frequently surprised to see the wonky stuff that popular
applications do - check images for symbols, et. c.
I guess what I’m saying is that when plugins and so forth are permuted
across the corporate user base, with their particular ways of using them,
I’d wager that that sandboxing doesn’t wouldn’t very well without a policy
change, retraining, retooling, et. c.
mm
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of
xxxxx@oracle.com
Sent: Tuesday, April 05, 2011 12:55 PM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] How to set other threads to the alertable state
I think that what we’re learning in the past few years is that we - the
engineers are the 1% that actually exercise the flexibility of a PC running
an OS like Windows or Linux. The other 99% just want to ‘use their
internets’ to send email and browse the web, and the flexibility actually
gets in the way in the form of malware and misconfiguration. These people
will only utilize a function if it comes shrink wrapped and with a name -
they’ll even pay a monthly fee for it. 5 years ago I was streaming Red Sox
games to my Treo in WA from my basement in MA using a tuner card, WM
Encoder, and media player - but I’m in the 1%. The other 99% had to wait
for their mobile provider to come out with “video streaming” and pay a
monthly fee for it (even though they already pay for an internet connection
on their phone - that is just crazy!).
I still ask people WHY they’re so excited about Apple products like the
iPhone, iPod or iPad - and they can’t really give an answer to which I can’t
reply “well I can do that with my WM6.5 phone, or in Windows”. The fact is
that it doesn’t matter - people will buy functions before they’ll figure out
how to use something that is infinitely configurable.
NTDEV is sponsored by OSR
For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars
To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer