Microsoft To Block Windows 11 Browser Workarounds (thurrott.com) 134
The creator of EdgeDeflector said this week that the latest Insider build of Windows 11 now blocks all default browser workarounds. If this functionality makes its way to the finished product, it will mark a new, dark chapter for Microsoft, which told the media at the Windows 11 launch that it was aware that it had made changing app defaults pointlessly difficult, but that it had not done so maliciously and would fix it. This is the opposite of that claim. From a report: "Something changed between Windows 11 builds 22483 and 22494 (both Windows Insider Preview builds)," EdgeDeflector creator Daniel Aleksandersen writes in a new blog entry. "The build changelog ... omitted the headline news: you can no longer bypass Microsoft Edge using apps like EdgeDeflector."
Microsoft not communicating effectively? I find that hard to believe. Cough. But Microsoft moving to make Windows 11 behave even more maliciously towards its users and browser rivals? That I have a hard time with. Basically, EdgeDeflector, as well as third-party browsers like Mozilla Firefox and Brave, intercept OS-level URL requests that force you to use Microsoft Edge even when you have gone through the incredibly ponderous steps to make a non-Edge browser the default in Windows 11. But in the latest Insider Preview build, Microsoft is changing how these URL requests work. And it's no longer possible to intercept URL requests that force users to use Edge instead of their default browser. (In the Insider builds. This functionality will come to mainstream users in the coming months unless we can change Microsoft's collective mind.)
Microsoft not communicating effectively? I find that hard to believe. Cough. But Microsoft moving to make Windows 11 behave even more maliciously towards its users and browser rivals? That I have a hard time with. Basically, EdgeDeflector, as well as third-party browsers like Mozilla Firefox and Brave, intercept OS-level URL requests that force you to use Microsoft Edge even when you have gone through the incredibly ponderous steps to make a non-Edge browser the default in Windows 11. But in the latest Insider Preview build, Microsoft is changing how these URL requests work. And it's no longer possible to intercept URL requests that force users to use Edge instead of their default browser. (In the Insider builds. This functionality will come to mainstream users in the coming months unless we can change Microsoft's collective mind.)
Anti-Trust 2: Browser Boogaloo (Score:5, Informative)
Isn't this the whole thing that got them sued the first time around and they had to make the E versions for Europe?
Re: (Score:2)
You mean the browser choice screen that "accidentally" got left out for more than a year?
Re: (Score:2)
You mean the browser choice screen that "accidentally" got left out for more than a year?
Yes. I hope that will cost them, say, 500M or so. Note that Win11 is a new OS, so the old court ruling does not apply directly, but I would be very surprised if they will not get slapped down again.
Re: (Score:3)
I think that was the tying alone that got them into trouble, both in the US and Europe. Back in the 90's, it used to be once you installed a web browser it would automatically set itself to the default. Later came a sort of "gentlemen's agreement" between Microsoft and Netscape that they would ask the user to set the browser to the default. After Microsoft's browser market share went to shit, they then started making Edge the default, and gradually began making it more and more difficult to change it. They
Re: (Score:2)
It not only got them sued, they got punished and had to give users a choice between several browsers on installation. Sadly, nothing happened when they dropped that choice silently later on.
Guess it is time to fine them, say, 1B and require that choice on installation again.
Re: Anti-Trust 2: Browser Boogaloo (Score:2)
Re: Chrome ? (Score:3)
Re: (Score:2)
Windows has a monopoly, as defined by the courts.
https://www.justice.gov/atr/co... [justice.gov]
Re: (Score:3, Insightful)
>"Do chrome books allow other browsers without erasing the chrome is or file system?"
I don't know about chromebooks, but all my Android devices allow me to very easily select which browser I want to use. The selector isn't hidden, and the choice sticks forever. And it doesn't try to trick me, force me, or harass me to use Chrome.
It's Microsoft being Microsoft... (Score:5, Interesting)
.
Just wait for the forced migration of desktops to the cloud. My guess is that it is coming sooner than later...
Re: (Score:3, Insightful)
If you had been under a mistaken impression that Microsoft had changed from the malicious arrogance of the 1990's and 2000's, then you've been in a dream world. Microsoft knows it has a lock-hold on the desktop PC world, especially in the lucrative enterprise market. So why should Microsoft even try to give the impression it cares about what Windows users think?
. Just wait for the forced migration of desktops to the cloud. My guess is that it is coming sooner than later...
very likely... and I wouldnt be surprised if a pro version could also end up needing some kind of subscription to stay activated... I would think that Apples 'scanning' functionality in ios would also make its way to Windows 11 at some point.
Who cares ? really ? (Score:2, Redundant)
Mirosoft. Who cares ? really ?
Re: (Score:3)
Re: (Score:2)
In my company we use an application that absolutely can't run under WINE, and not because of developers' laziness or unawareness of WINE, but due to WINE's technical deficiencies. (in our particular case, WINE's lack of support for DOS/Windows' file locking/sharing APIs)
Re: (Score:2)
Re: (Score:2)
MS has been shitting on the user all along. They never changed. Anti-competitive, 2nd rated technology (at best), crap UI, crap reliability, crap security, crap performance, everything closed, way more obscure mechanisms than Unix ever had, etc.
If the users and corporate deciders were a bit less stupid, this company would have ceased to exist a long time ago.
Re: We need legal protection against software abus (Score:2)
Re: (Score:2)
Yeah, because Apple and Google never act maliciously in order to expand their own vendor lock-in...
Re: We need legal protection against software abu (Score:2)
Re: (Score:2)
Simply don't use Windows (Score:4, Interesting)
Re:Simply don't use Windows (Score:5, Informative)
That threw me for second [decades]. It's been decades for me too - gave up on Microsoft roughly in 2000 w/ the games they were playing. It's been two decades and my business system(s) run more reliably and it's been a whole lot cheaper not paying Microsoft "licensing". They are a multi-billion dollar joke of a company.
Re: (Score:2)
I mark my full switch to Mandrake Linux, no dual booting, by the end of mainstream support for Windows 98. https://en.wikipedia.org/wiki/Windows_98 [wikipedia.org]
I had already experienced Microsoft's activation requirements with Office XP. About a month after installing Office XP, I upgraded my hard drive, I did a fresh install of Windows 98 and Office XP. BAM, this time I now had to call Microsoft for the privilege of activating Office XP.
I knew this would be a constant reminder that Microsoft products weren't owned,
Re: (Score:2)
>"Mandrake Linux may not be around any more but my preference for not Windows remains valid. "
It does, in the form of Mageia Linux. (Which is what I use for my main desktop; before that, it was, indeed, Mandrake).
>"I mark my full switch to Mandrake Linux, no dual booting, by the end of mainstream support for Windows 98"
I never used MS-Windows (or MacOS) on my home machines :) And that goes all the way back to 1982 or so.
Re: (Score:2, Informative)
I'll just leave this here. [gnu.org]
Re: (Score:2)
Thank you for this, I have been doing web searches to try and follow up. It looks like this feature has been disabled by default for a long time, but what has me scratching my head is: how do I enable it? I have been looking for up-to-date information on this telling me what the feature is called and how to enable it, but so far my searches all lead me back to the old articles that are no longer relevant.
And anyway, in my use of Ubuntu 20.04, I have never once seen an ad anywhere. If Ubuntu is supposedly
Re: (Score:3)
Re: (Score:2)
Re: (Score:2)
Re: (Score:3)
Ubuntu is the Windows of Linux though. If you want something that isn't as much of an intrusive hassle, there are better distros available.
Re: (Score:2)
Can you provide more details about what's bad about Ubuntu, and how other distros improve on that?
I used Fedora for a while, and applying updates always brought risk of breaking something that previously worked. Applying major updates even more so, one time ruining my PC and requiring a fresh from-scratch install to get things working.
When I switched to Ubuntu, everything just worked. Not once has an update broken something that previously worked (for me). Especially and relevantly, my NVIDIA graphics dr
Re: (Score:2)
A very long time ago (12.04 or possibly 14.04 or 16.04) Ubuntu had the "unmitigated gall" of installing "spyware" on your install.
This terrible thing(tm) was basically a switch that did your desktop search not only locally but also online, and IIRC sent results back to...somewhere.
It was easily turned off and removed in the next LTS, but I guess that smacked too much of MS's tactics, and they became the pariah for many years among the *nix diehards.
Also, Ubuntu is successful, and I guess that's fun to hate
Re: (Score:2)
So you haven't used Windows in decades because you knew back then that Microsoft was going to release Windows 11 and force Edge to handle system URL calls? Wow, that is some serious precognition you have there. Does it extend to other things? If it does could you send me the lottery numbers for next weeks draw?
8^)
Re: (Score:2)
...because you knew back then that Microsoft was going to release Windows 11...
He knew it because, like many of us back then, he knew Microsoft. It was painfully obvious that Windows was headed towards a rental model, even back in the later 1990's. In fact, it started as a tongue-in-cheek joke that Windows would eventually come with a coin slot, and users would be required to frequently insert quarters to retain temporary access to their data. The only question involved timing. The results were (and are) inevitable.
That Microsoft's greed and sadism know no boundaries were two of the
Your tinfoil hat has holes. (Score:2)
For this very reason haven't used windows for decades, even though Ubuntu can some times be a pain, its worth it to stop M$ watching
You somehow think you are free from being observed because you don't use MS windows?
Remember (Score:4, Funny)
Re: (Score:2)
So we're getting smaller, after all Win8 turned it into a tablet.
Sometimes I do wonder about business decisions (Score:3)
There are times I do wonder what about business decisions.
Even from a business perspective, this is plain silly.
Let's take some 'reasonable' business cases where microsoft would want to have those edge:// links only use Microsoft edge
1. Quality assurance. They want the link microsoft uses within the OS to always work and they can assure that by QA using edge
2. Ads integration. They want ad money to flow through edge
You can definitely get *most* users to use edge by just making the defaults point to edge.
But why annoy power users? You know power users are just going to be viciously annoyed at this. Anecdotally, I'm a power user, and I don't bother really changing windows too much. I probably wouldn't change the associations for edge:// stuff. If I'm not doing it, *most* regular users aren't going to do it either. So they get most of what they want.
Even from a selfish business perspective, now they have annoyed power users, increased the chance of various anti-trust mechanisms... and for what?
I can't answer that. Ego maybe?
"incredibly ponderous steps" ? I think not. (Score:2)
That being said, isn't it not the case that when you install and run Chrome (and Firefox, IIRC) that you are given an option to make it your default browser, right from within the app? It's clear as day. I will grant that, if you choose to go into the system settings directly and try to adjust default applications it is confusing for the laypeople. But if you don't know how to click "Yes" when asked by Chrome to make *it* your default browser, when you want it to be
Re: "incredibly ponderous steps" ? I think not. (Score:5, Interesting)
Clicking yes to set as default opens the settings page where you still have to do it manually, and even then there are still plenty of links that MS forces to open in edge regardless of your defaults. Hence edgedeflector existing to intercept the edge:// links so you can actually use the browser you chose to install.
Good luck getting people to upgrade to Win 11 (Score:5, Insightful)
Re: (Score:2)
The most insidious of all, Windows 11 Home has no local account. You have to have a Microsoft account to install and use it.
I used Ubuntu at home regularly for about a decade. Instead of getting better, it seemed to get worse. However, I did like it and I stuck with it.
Then my job involved Visual Studio, which I do like, and I will admit that Windows 10 is fairly smooth. I hate to say it, but Windows 10 isn't too bad. So of course MS has to totally screw it up.
It seems they get off on screwing things up.
Re: (Score:2)
That happened in W10 too. Many people still upgraded to use it for Windows. :P
Just big tech doing what big tech do... (Score:2)
Anyone surprised?
The most annoying thing is that these kinds of moves undermine any actual decency that parts of big tech companies do - and they absolutely, for the most part, have divisions that are "for the good".
Hell, Microsoft have been lauded for their turn-around approach to FOSS and adherence to standards, but that's been driven by a few divisions of Microsoft.
It's clear, in any mega-corporate environment with many thousands of employees, the bean-counters always win over - the sleezy ways to rake i
Erh... why? (Score:2)
I mean, back when IE6 ruled the world like a crackpot dictator with a really weird taste in fashion and putting the Ministry of Silly Walks in charge of locomotion, the idea was that this way they can sell their IIS because it was (more) compatible with that catastrophe. But last I checked Edge is basically Chrome with a few tidbits attached, or did that change again?
What's in it for MS?
Re: (Score:2)
Restarting the process of Embrace, Extend, Extinguish.
Edge is basically Chrome with a few tidbits attached
for now
Re: (Score:2)
>"I mean, back when IE6 ruled the world like a crackpot dictator with a really weird taste in fashion and putting the Ministry of Silly Walks in charge of locomotion, the idea was that this way they can sell their IIS because it was (more) compatible with that catastrophe. But last I checked Edge is basically Chrome with a few tidbits attached, or did that change again?"
Chrome *is* the new IE. And yes, Edge is Chrom*. Chrom* is controlled by Google. It is not a community-driven project and as such we
Re: (Score:2)
Let me rephrase that: What's MS interest in handing control over the browser market to what is essentially a competitor?
Re: (Score:2)
>"Let me rephrase that: What's MS interest in handing control over the browser market to what is essentially a competitor?"
It is a double whammy.
They have control over part of the browser- the part that can collect data on you. But not the base part that dictates compatibility and protocols, which is another near-monopoly by a competitor. So it is kinda the worst of both worlds for the user.
Really? (Score:2)
... Microsoft moving to make Windows 11 behave even more maliciously towards its users and browser rivals? That I have a hard time with.
Mr. Thurrott, the photo of you which accompanies your article suggests that you are far too old to believe in Santa Claus, the Tooth Fairy, or a Microsoft that's anything other than psychopathic and malignantly self-serving.
And so (Score:2)
Are there researchers who block everything unless they can canopener it and see what is in there? Especially stuff going to Microsoft?
Dear Microsoft. (Score:2)
I do NOT wish to use your fucking browser.
Ergo
Stop trying to make me fucking use your fucking browser!!!
Re:Dear Microsoft. (Score:4, Insightful)
Dear random user,
What makes you think we care about what you wish?
Love,
Microsoft.
Why would Microsoft care? (Score:2)
I'm forced to ask why Microsoft would care whether or not people use their browser. It's not like they're selling Edge. So this has to mean that Microsoft is somehow tracking users' activity and collecting data to sell it.
Re: (Score:3)
If you use Chrome, then you are asked to log into google, you are steered toward google search, google mail/chat, google docs and google drive are also 'logical' choices if you live in Chrome and by extension Google's world.
When using microsoft software, you get steered/nagged to do onedrive, office365/teams, and using a microsoft account as your de-facto online identity.
Microsoft doesn't care about the browser as an end in and of itself, but they want to do what they can to deny Google using Chrome to prom
Luck for me ... (Score:2)
None of my systems are allowed to -- I mean capable of -- of running Windows 11 (according to MS), so I'm safe. When Windows 10 support expires in Oct 2025, I'll (finally) make the switch to using my Linux systems full-time for everything.
Windows will never belong to you (Score:2, Insightful)
Windows inherently sucks. Either stop using it or confine it into a VM to use for rare specialty apps or get over the fact you expressly consented for Redmond to do as it will to THEIR OS.
Windows does not belong to you. It never will. Stop wanting that because you cannot have it.
You chose software slavery for some trifling nonsense like games when you should hate slavery more than you crave toys.
Not all that bad (Score:2)
Making changing the default browser for user browsing difficult was definitely a sh*t move on Microsoft's part.
However, I'm more neutral about not allowing redirection of OS level web access to a program other than Edge. Certainly, Firefox and Chrome aren't going to do anything to those calls that would compromise them, but if some other browser is inserted in that is under the control of a bad actor, then it could be a security problem.
Illegal Monopoly Move (Score:2)
Re:This is a security issue, not about choice. (Score:4, Informative)
There is a bit of similarity here in how Edge is enforced and Apple enforces WebKit within iOS. I think it's a dangerous precedent.
Re:This is a security issue, not about choice. (Score:5, Interesting)
Absolutely, Edge can very often be the unsafe choice. I had Firefox set up for my mother, with adblock to stop with all that shit and the malware and scam vector. Then I find out she's using Edge sometimes, because Microsoft pops it up, and it's completely and totally not configured for safety, because Microsoft doesn't default to safety. So I uninstalled. But it'll be back when I go and visit on Thanksgiving, I guarantee it, since mom is mostly computer illiterate and can't tell that it's a different browser (possibly she might accuse me of breaking things because "mozilla" got rid of her bookmarks).
While I'm smart enough to get rid of Edge, most people are not, and Microsoft knows this.
I am not claiming that Edge is necessarily unsafe or a terrible browser, but it's a major hassle to secure and protect multiple browsers. (yes, I was also uninstalling chrome multiple times on mom's computer, because she can't resist clicking "ok" in a popup)
Re: (Score:2, Funny)
I am not claiming that Edge is necessarily unsafe or a terrible browser, but it's a major hassle to secure and protect multiple browsers.
Sounds like MS has made your job easier then
Re: (Score:2)
Possible your mom wouldn't take it well, but you could save yourself and her a lot of grief by creating a new admin account and setting her up as a standard user so she can't install anything.
Re: (Score:2)
I have done this. Apparently she had someone go and upgrade her computer to Windows 10 without ocnsulting with anyone else first...
Re: (Score:2)
I have done this. Apparently she had someone go and upgrade her computer to Windows 10 without ocnsulting with anyone else first...
There is a level of "computer illiterate" where you cannot really do much for these poor people anymore.
Re: (Score:2)
>" So I uninstalled. But it'll be back when I go and visit on Thanksgiving, I guarantee it, since mom is mostly computer illiterate and can't tell that it's a different browser (possibly she might accuse me of breaking things because "mozilla" got rid of her bookmarks)."
Then why not install Linux for her and be done with MS-Windows? My mother has been using Linux for eons. She doesn't care which OS is on the computer- it does Email, video, web browsing, office documents, her card games, etc.
Re: (Score:2)
Then why not install Linux for her and be done with MS-Windows? My mother has been using Linux for eons. She doesn't care which OS is on the computer- it does Email, video, web browsing, office documents, her card games, etc.
Amen!
Re: (Score:2)
A good trick I found is to create a directory where the installer wants to write a file, or a file where the installer wants to make a directory.
This will make malware installers fail, no matter which side of the keyboard they abuse a vulnerability on.
Re: This is a security issue, not about choice. (Score:2)
I'm betting there's lots of people in Bangalore or some such place who'd love to help her out with her PC problems...
Re: (Score:2)
Re: (Score:3)
Edge has it's problems, it's not the most stable browser out there, but it is the only browser that protects your privacy by default
Brave does a much better job.
Re: (Score:3)
>>"Edge has it's problems, it's not the most stable browser out there, but it is the only browser that protects your privacy by default"
>"Brave does a much better job."
And yet, Brave and Edge and Chrome are all Chrom*. If you really value privacy and choice, Firefox might be the best choice you have left. Just turn on/off the features/metrics you want.
Re: (Score:3)
Where on earth do you FOSS zealots get off making up such nonsense? Edge is significantly more secure by default than pretty much any other browser - it enables fairly strict tracking prevention by default which is more than can be said for Firefox and Chrome.
Definitely not true.
https://hacks.mozilla.org/2021... [mozilla.org]
https://blog.mozilla.org/secur... [mozilla.org]
When you first start firefox, it prompts you whether to enable these features, thus offering better OOTB security.
Re: (Score:3, Informative)
I think there is a misunderstanding here. Microsoft isn't blocking users from changing the default browser. They are, instead, forcing applications (including both browsers and malware) to stop using hacks to change them and instead use the published and documented API to launch the file association settings panel for changing file associations.
Could that interface suck less? Absolutely.
Could the process be better? Absolutely.
Could a five year
Re:This is a security issue, not about choice. (Score:5, Insightful)
Here's an example that bugs me... when I want to see more information about one of the pretty desktop pictures on the login window, there's a link near the top of the screen. Clicking on it launches Edge and takes you to a bing search page with something generic like "Finland scenery" when I'd expect it to launch Firefox and supply me with something useful like, I don't know... photo credits?
Re: This is a security issue, not about choice. (Score:3)
Re: (Score:3)
Re: (Score:2)
Full Disclosure: I work for Microsoft
You should be ashamed of yourself. You probably know that.
Re: This is a security issue, not about choice. (Score:2, Insightful)
This.
I was going to say the same thing. Obviously we do not want malicious lookalikes to hijack browser links, enabling them to scrape the most sensitive user data.
What MS needs to do allow a certain set of signed browsers to be set as a default easily. If a user for whatever reason needs to use an unsigned default browser, then the process for setting that could be quite convoluted.
Re: (Score:2)
Now I get that most computer users ARE morons a
Re: This is a security issue, not about choice. (Score:2)
Many people who are not morons do accidentally install malware.
There are ways for MS to allow and simplify user choice and allow users to opt out of safety if they wish. We will see if MS implements one of them.
Re: (Score:2)
stop trying to reach the smallest common denominator.
Re: This is a security issue, not about choice. (Score:2)
I am going to go out on a limb and assume you donâ(TM)t own a business whose profit is a function of the number of people who buy your productâ¦
Re: (Score:2)
you assumed wrong.
Re: (Score:2)
stop trying to reach the smallest common denominator.
I know what you are /trying/ to say (corollary: English is confusing!), but the smallest denominator means the largest fraction.
Is that you billg ;] (Score:5, Informative)
From: Bill Gates [slated.org]
Sent: Sat Dec 05 1998
One thing we have got to change is our strategy — allowing Office documents to be rendered very well by OTHER PEOPLES BROWSERS is one of the most destructive things we could do to the company.
We have to stop putting any effort into this and make sure that Office documents very well depends on PROPRIETARY IE capabilities.
Anything else is suicide for our platform. This is a case where Office has to avoid doing something to destroy Windows.
Re: (Score:2)
Re:This is a security issue, not about choice. (Score:5, Insightful)
I'd be applauding this move if Microsoft didn't force users into using Edge instead of their browser of choice for various tasks. But since they DO, then what they're mainly blocking is users' attempts to wrestle back choice of browsers in the first place. If they were truly concerned about security, they'd ensure that only the user's selected browser was used, and only use that consistently. No, this is about ensuring eyeballs land where they want them to land, rather than where the users want them to land.
BTW, this is reported by Paul Thurrott, who is not typically hostile to Microsoft. You have to be a pretty hardcore MS cheerleader if you're going to defend them on this one.
Re: This is about choice. (Score:2)
AutoTrix insisted:
I dunno why anyone is upset about this. When users didn't need to explicitly set defaults, the mechanisms was very abused by browsers and adware.
The browser is required to be the most secure part of an operating system due to the amount of authentication and personal data processed through it. If all of a sudden a malicious browser that looks just like edge or Chrome was set as default and you entered details into it, those details could be compromised.
Found the Micro$oft shill ...
Re: (Score:2)
I dunno why anyone is upset about this
Your lack of understanding doesn't change the fact that people are upset about it for valid reasons. Just because you are OK with this latest move by MS is not a valid reason for everyone else not to be.
The browser is required to be the most secure part of an operating system ...
A browser should be the most secure application on a system for all the reasons you mention.
Why is the browser now considered part of the OS? Every other non Microsoft OS in existence does not integrate or bind a specific browser to core OS functions.
Plus Microsoft hasn't had a very good record of securin
Re: (Score:2)
I dunno why anyone is upset about this. When users didn't need to explicitly set defaults, the mechanisms was very abused by browsers and adware. The browser is required to be the most secure part of an operating system due to the amount of authentication and personal data processed through it. If all of a sudden a malicious browser that looks just like edge or Chrome was set as default and you entered details into it, those details could be compromised.
Everything is a security issue. There is nothing that can't be justified by invoking safety. For your safety we will monitor everything you do. For your safety we will control what can be executed. For your safety we will countermand your choices and substitute them for ones we think are safer.
To address your argument on the merits.
1. There is no protection from a compromised system.
2. Web browsers are not a part of an "operating system".
3. Any fake browser concern could be addressed by checking digita
Re: (Score:2)
>> This is a security issue
No it's not.
Re: (Score:2)
By that argument, you shouldn't be able to install any software under Windows... because it might be malicious.
Reality is that UAC is specifically designed to deal with this problem.
And I'm sure you turned it off on your computer, like most people who would rather have insecurity than inconvenience.
Re: (Score:2)
>"By that argument, you shouldn't be able to install any software under Windows... because it might be malicious."
Welcome to Apple IOS. Where only "vetted and approved" apps are allowed.
MS is marching right down that path. Complete market control in the name of security.
Re: (Score:2)
It is about choice. As I understand it, instead of a simple secure chooser dialog from the OS, it's broken down to a zillion sub-options, in other words, the secure OS interface has been made as painful as possible.
If a simple chooser box popped up, nobody would be complaining and nobody would have an excuse for trying to bypass it.
Re: (Score:2)
I dunno why anyone is upset about this. When users didn't need to explicitly set defaults, the mechanisms was used very abused by browsers and adware. The browser is required to be the most secure part of an operating system due to the amount of authentication and personal data processed through it. If all of a sudden a malicious browser that looks just like edge or Chrome was set as default and you entered details into it, those details could be compromised.
Thats the thing though it used to be. with UAE, for all its flaws, it MUST bring up a dialog box to change these kinds of settings. If they still want to be an asshole, but still do it for "security" they could just require the web browser to have a signed exe to run as an OS url opener. Instead they just ignore the setting that YOU set.
Re: (Score:2)
That was the fault of the fcuked-up Operating System combined with ActiveX and "Internet Explorer". That couldn't tell the difference between 'open' and 'run'.
Re: (Score:2)
Or, people should learn not to fall for malware scams. The fact that some users are retarded is no excuse for bad OS design.
Re: (Score:2)
Re: (Score:2)
By no means do I think anyone should be using Microsoft Browser, now do I support anything that leads us back to the dark days when MS had a commanding market share of the client, and we all know how many years it took to make things better. But I also remember how constant the unwanted hijacking of browsers was for User PC's, and how every software download was 'sponsored' by adware campaigns that used dark patterns to trick all the hapless users into switching browsers. So long as protecting the default browser *also* protects the non-microsoft choice, (once made) I think this is a good thing.
So malware can read, change, exfiltrate or destroy all of the users data and collect information about everything they do including completely replacing the UI shell (complete with fake handlers) but hey at least malware can't change the systems default URL handler.