drag and drop in command window

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

anyone notice that you can no longer drag and drop a file or folder on top of
a command window to have the path automatically entered?
 
This was noted in the Beta stage. The response in this ng was it was
removed for "security reasons".
You can still obtain the path by Right-clicking on a folder (while holding
down the Shift key) & selecing it in the menu.
 
It's the same reason drag and drop is not supported in Virtual Server;
security.
 
What reason?
"Security" explanation is not enough for me.
How can I know it is not a bug?
Microsoft should explain if it really cares about customers.
Jack
 
It is not a bug. Security is a large issue in Vista. I don't know at what
point in a drag and drop that you could insert a UAC prompt in a command
window operation but it is apparently not a simple matter.
 
It is an attack surface issue. Apparently drag and drop can be used to hack
a system. Remember that Vista is used in networked environments. In order
for MS to market the client to security-minded enterprises and government
agencies it must first meet their stringent security standards.
 
This reminds me of something that came up but I didn't follow up on. In one
chat I remarked in Vista that an improvement over XP was that when you go to
right click and rename a folder, the focus is often lost so that you have to
repeat the process or many times, even when no window is open "under" the
folder you're trying to click or bordering on the space underneath it, I
have to tuck the folder or file into another folder to get it named. In
Vista, you can move windows around, or the mouse around and the focus of the
open space to rename is stable. When I made that remark, someone on a Vista
team (whichever chat) said that mouse focus can raise a significant security
issue. That point seems analagous or in the same "ball park as the one you
just made. I just didn't follow up on it fully and if I did, I wonder if it
would require coding knowledge. Probably not though.

CH
 
Interesting. Thanks for sharing that!

Chad Harris said:
This reminds me of something that came up but I didn't follow up on. In
one chat I remarked in Vista that an improvement over XP was that when you
go to right click and rename a folder, the focus is often lost so that you
have to repeat the process or many times, even when no window is open
"under" the folder you're trying to click or bordering on the space
underneath it, I have to tuck the folder or file into another folder to
get it named. In Vista, you can move windows around, or the mouse around
and the focus of the open space to rename is stable. When I made that
remark, someone on a Vista team (whichever chat) said that mouse focus can
raise a significant security issue. That point seems analagous or in the
same "ball park as the one you just made. I just didn't follow up on it
fully and if I did, I wonder if it would require coding knowledge.
Probably not though.

CH
Click to expand...
 
Can you shed any more light on this Colin.
I do not see the difference b/w dropping a folder in CMD window (to have its
path displayed) and typing the path in manually.
I can't see the security risk.
 
You should take the question to microsoft.public.windows.vista.security.
Those folks are the experts. Also, if you are intrigued by vulnerability
issues, you should check out the monthly security webcasts. The one this
month is at
http://www.microsoft.com/events/webcasts/upcoming.mspx. Scroll down to Jan.
10 and sign up for
"TechNet Webcast: Information About Microsoft January Security Bulletins
(Level 200)."
What is great about live meeting webcasts is that you can ask the experts a
question like yours during the session. Of course you can also download and
view all the previous monthly webcasts (from the on-demand listing).
 
Back
Top