Read more.Quote:
Bug can be triggered by user simply opening a folder with specially crafted shortcut.
Printable View
Read more.Quote:
Bug can be triggered by user simply opening a folder with specially crafted shortcut.
Lovely.
And this vulnerability has existed since build 1803? 2018!
It's mad. And MS trying to mitigate it saying "social engineering would be required" is just farcical. Most attacks require some form of human failure. It's almost a prerequisite of hacking that you'll have to socially engineer part of it. That is absolutely no mitigation and it also wouldn't be difficult to get lots of people in an office to do this - I can think of a few ways. Cybersecurity needs to work in the presence of the flawed human.
Just a note of caution, Admin here aren't fond of swearing, even with the "*"s in there. I've been slapped before about that.
Another Microsoft OS.... another bug is born....
Everything has bugs. It's dealing with them that really matters. How long has this been around? I wonder how many payloads it is now a part of. In the seedy world of corporate espionage / competition, corrupting a few choice hard drives could make the difference between you and them releasing a product first.Quote:
Originally Posted by souper
I once wrote an "Hello World" that was mostly bug free.Quote:
Originally Posted by souper
I Swear the windows 10 team hasn't got a clue.
Seen photos of the windows team going work or meetings using apple products and just that tells me volumes.
I really wouldn't be that hard to create merry mischief with this. I'm not sure posting examples is a great idea, especially if Microsoft hasn't patched out the flaw.Quote:
Originally Posted by philehidiot
Challenge accepted.Quote:
Originally Posted by Iota
No matter how hard i tried I've not been able to break my VM with this, worst i get is the triggering of chkdsk.Quote:
Originally Posted by philehidiot
I was going to play with it on mine and then saw something about it not working on VMs. Or maybe it's not the big deal people make out.Quote:
Originally Posted by Corky34
EDIT - sod this. I'm downloading windows 95. It won't have this problem and these days is impervious to viruses.
EDIT EDIT
EDIT config.sys
LH mscdex /d:mtmide01
Will blu' ray work now?
From what I'm reading here, it doesn't sound that system threatening.Quote:
Originally Posted by Corky34
Not like the Windows bugs of old like the Ping of Death. I dunno, perhaps Microsoft can't even write proper bugs any more ;)
Microsoft writes the best bugs. No one writes better bugs. I can't think of anyone who can write better bugs. If you say that they don't do the best bugs, you're fake news.Quote:
Originally Posted by DanceswithUnix
Make bugs great again.
P.S. I am actually now running Windows 95. What is seriously disturbing is I just fell back into the keyboard shortcuts and it works so much easier than Windows 10....
That's sad.
EDIT - windows 95 struggles with 4K.
I bet it does a mean 640 x 480 though.Quote:
Originally Posted by philehidiot
Edit: or was it 640 x 360? :shocked2: I don't actually remember now...
Edit Edit: Nope, 640 x 480 :)
Brings back memories doesn't it.........I recently spent many hours getting 98SE installed and working well on an old spare PC, just for the hell of it really. I'd forgotten that, back then, Windows didn't even have TCP/IP enabled for network adapters by default.Quote:
Originally Posted by philehidiot
After sorting that out though, I can get to Google in IE5, although not many other sites as most obviously require https these days (and IE5 is just a little behind the curve when it comes to SSL/TLS support).
Until I installed it, I'd forgotten about the funny sound themes that came with 95/98, where pretty much every mouse click results in an audio sample being played. The novelty wears off quite quickly, if I'm honest. And I spent a while trying to work out why I couldn't find any USB 2.0 drivers, before realising USB was just USB in 1998, at a whopping 12.5Mbps :D
I keep meaning to try that. Was that on bare metal, and how old is the PC? People keep talking about PC backwards compatibility, but I have to wonder if my and old WIndows 3.1 install would still run on a modern PC.Quote:
Originally Posted by dannyboy75
Windows 95 should be pretty nippy though, given modern CPUs have more L3 cache than PCs back there had main system ram :D
Would have thought there would be third party USB 2.0 drivers though, people were running 95/98/Me for years. Perhaps only drivers for the right old hardware though.
Does it even find a modern USB mouse and keyboard? I would have thought you wanted 98SE these days.Quote:
Originally Posted by philehidiot
Having said that, I notice my wife's new B550 motherboard has a PS/2 socket for either mouse or keyboard. So could probably run DOS on that if I could find that USB to PS/2 adaptor that I probably never threw out :)
Hey some of us are quite happily running PS/2 keyboards I'll have you know.
PS/2 is still a very good interface with low latency, you really don't need superhigh bandwidth to push the small amounts of data that keyboards or mice send, latency is a far bigger issue.
The main advantages usb has over ps/2 is that it's hot swappable, not having to reboot your system because you've plugged something in is so good, and wireless adaptors, at least I don't know of any wireless receiver dongles that plug into ps/2.
oh and to anyone pottering about with win98 please please do yourself a favour and dig around for an old copy of netscape navigator or (esp) Opera if you think edge/IE is bad, the early versions where hot garbage
Not dissing PS/2, just that I'm very certain my last PS/2 mouse failed years ago and I *might* have a PS/2 keyboard in the loft but they have mostly fallen victim to some drink spillage or similar over the years and are similarly gone.Quote:
Originally Posted by Pob255
Worst OS ever made. What is Microsoft thinking by keeping this monstrosity alive via the SaaS (software as a service) model? Other than money of course...
Quote:
Originally Posted by DanceswithUnix
This is the PC. A fellow PC geek friend of mine cobbled it together as a present for my 30th birthday (which was 15 years ago now, depressingly) and I've kept it ever since. It originally had XP installed, but I stuck 98SE on it a few months ago to play an old flight sim from that era (A-10 Cuba), and also just for the nostalgia.
As you say, I think USB 2.0 was gradually becoming mainstream around the turn of the millennium, but this mobo definitely doesn't support it. It's a Gigabyte GA-7DX+ which has a weird hybrid AMD/VIA chipset. CPU is a Cyrix 1600 MHz, IIRC.
https://i.imgur.com/X7vsgZ1.jpg
https://i.imgur.com/opQPWPi.jpg
https://i.imgur.com/Fo8QyHH.jpg
I installed it on a VM. I suggest this is a good idea unless you're exceptionally bored and masochistic. When I installed Windows 95 originally it took four hours and multiple attempts.
Internet explorer can open google (it even looks like back in the day, part of me thinks that's some kind of easter egg as there's no reason to do that...) but anything on HTTPS will error. Most of the internet then.
That PC is a beauty. I miss ISA. I had an awesome ISA sound card back in the day (AWE 32).
If you're installing Windows 95 on a newer computer with a CPU faster than 320MHz (ish, I'd been drinking last night and I only remembered what I'd done with Windows 95 when I saw this thread...) then you need to patch it as it'll just fatal exception error or something on boot.
640x480 was so annoying as I used a 1024x768 monitor (which made me wet myself when "HD" at 720 lines was all the rage and such "high resolution" for games) and every graphics bug (of which there were many) would ditch it back to 640x480 and ruin my desktop chaos.
If you do this, it'll ruin Windows 10 for you. Honestly, everything just does with sensible keyboard shortcuts and no silly animations. Windows 10 is like wading through treacle in comparison.
EDIT - observation. Thread on a story about yet another Windows 10 bug that hasn't been patched devolves into installing a 26 year old OS. There's a takeaway for Microsoft there.
data mining on users and monetising it. We are the product now, not the OS.Quote:
Originally Posted by fend_oblivion
Best thing you can do? Change as many metadata fields on files, etc to the word "penis" and rename as many folders as possible to "horse stuff".Quote:
Originally Posted by ik9000
They won't pry ever again.
I think that may just cause lots of Viagra adverts popping up in your browser. ;)Quote:
Originally Posted by philehidiot
640x480? That is what I ran on Windows 95 back in the day, but provided your GPU can handle it, I bet it would handle 1080p just fine. I know Windows 98 First Edition handles 1920x1200 over VGA quite well, at least in 2D with a quality Matrox accelerator card.
I've also watched DVDs on my 98 FE box. I can't say it matches a mid-2000's XP box, and I'm not sure if the bigger problem is the first-gen DVD software or the 8 MB of VRAM, but it's doable if you're dedicated. Gotta upgrade to at least XP if you want Blu-Rays though... maybe 2000, haven't really tested that combo.
Really though the combination of challenges running on modern hardware, sparse USB support, and outdated browsers mean even for old times' sake I haven't used 98 in quite awhile. XP x86 is only 3 years newer, but feels a decade newer.
But what I really run (and would recommend, should Win10 bugs be too scary) is 8.1. More stable than 10, fewer changes, and still runs almost anything, the main exception being recent games published by Microsoft. And 4K UHD Blu-Rays I suppose, but I'd have to upgrade my TV to be able to tell the difference anyway.
Quote:
Originally Posted by philehidiot
I actually tried setting up 98 in a DOSBox VM initially, but it was a massive pain in the A. Installing it was simple enough, but then as soon as touched anything to do with the virtual S3 graphics card, I'd just get 'Windows Protection error' on the next reboot. I found getting it set up on that old bit of tin fairly painless by comparison (once I'd managed to find a spare PATA drive that still worked, anyway)
My only niggle is the old ATi graphics card in that PC doesn't support any 16:9 aspect ratios. I'm actually tempted to pick up a cheap 1280x1024 4:3 monitor from Gumtree when lockdown's over.
I found an old ISA sound card in my box of old crap too, Aztech something or other. I wonder if stuff like this will be worth something one day.
https://i.imgur.com/LiQDB77.jpg?2
When the nuclear war comes, it'll be worth a fortune as shelter building materials.Quote:
Originally Posted by dannyboy75
Microsoft Virtual PC 2007 SP1 (not Windows Virtual PC; ignore the warning on Win7/8/10 - works fine) works well with 95 and 98, as it emulates Pentium 3 + has vm additions for drag&drop support..
1. VirtualPC_2007_SP1_setup.exe (6.0.192.0)
2. VPC2007x86-KB969856.EXE (6.0.3790.0)
3. KB958162.msp
(also available in as x64 install, though still x86 guests only)
Can this be distributed via one of those URL shortener sites? Click on a shortened link and get this dodgy one?
URLs don't run commands on your local computer.Quote:
Originally Posted by Quartz
Unless I've made a mistake "file:///" followed by the command mentioned in the article would, it's not the running of a file that causes the problem but simply trying to access it that causes it.Quote:
Originally Posted by kalniel
I was trying it last week so i maybe misremembering but IIRC i was able to trigger a chkdsk by using "file:///" followed by the command in the article.
Can you shorten those with a URL shortener? If so, then yes, possibly vulnerable to a shortener link :(Quote:
Originally Posted by Corky34
That IDK, I've never used a URL shortener .