Linked by Thom Holwerda on Tue 23rd Sep 2008 15:38 UTC
"Since its release a few weeks ago, curious developers have been sniffing through the source code for Google's new Chrome web browser. Chrome's source is interesting for a variety of reasons: there's the new V8 JavaScript virtual machine with its boasts of near-native code performance, the WebKit rendering engine that does all the hard work of understanding and displaying web pages, and (last but not least), Chrome's secure sandbox designed to minimize the impact of any security flaws that might exist in both the browser and plugins alike. It is this secure sandbox that has piqued the curiosity of some observers, and for a reason that many may find surprising. From reading the source, it looks as though Google has reverse-engineered Windows, and that's explicitly prohibited by the Windows EULA."
Permalink for comment 331168
To read all comments associated with this story, please click here.
To read all comments associated with this story, please click here.
Recent Original Stories
Recent Comments
Headlines
Random Comments
Random Stories
Random OS Link
Member since:
2006-02-05
That is just silly. It comes down to that a supported API has to be supported. If you want to use an unsupported API that is fine, nobody is stopping you, but don't complain to anyone when it is broken in the next point release. Sun does it in java, Apple does it in OSX, Linux doesn't really do it, but the linux devs dont maintain backwards compatibility, so the point is moot.
Secondly, something like DEP is something that should be managed by the system 99% of the time. The capability exists in post XP SP1 systems to manually muck with it in those 1% of corner cases. Public facing apps that execute arbitrary code off the internet are in those cases, so they wanted to use it. Since this ability was only really exposed to the world post XP SP1 (which was primarily about fleshing out security), they had to rely on a hacky way to do it.
This is not proof that MS is "hiding its best code", it is chrome trying to utilize an obscure feature of the APIs in operating systems that came out before it was publicly supported. I would say more then anything it is a testament to their thoroughness, since most people would have just said "we dont support pre xp sp1.", as it was a major upgrade that any xp user should have.