1

It's not often that Microsoft recommends that Windows users should disable a much hyped part of the OS, but that's exactly what has happened regarding the Windows Sidebar and Windows Gadgets found in Windows Vista and Windows 7. Microsoft Security Advisory 2719662 clearly states "Disabling the Windows Sidebar and Gadgets can help protect customers from vulnerabilities that involve the execution of arbitrary code by the Windows Sidebar when running insecure Gadgets" and Microsoft even provides a handy Fix-It tool to do the job for you. So what's all the fuss about, all of a sudden?

dweb-gadgets

Well the simple answer is either 'Black Hat 2012' or "Gadgets have always been insecure but now someone has actually noticed the fact". The someone in question being Israeli security researcher Mickey Shkatov and infosec professional Toby Kohlenberg who are planning to reveal just how insecure the whole Windows Gadget Platform actually is on July 26th at Black Hat USA in a briefing aptly entitled 'We have you by the Gadgets'.

The briefing promises to reveal "a number of number of interesting attack vectors that are interesting to explore and take advantage of" as part of their "research into creating malicious gadgets, misappropriating legitimate gadgets" and "the sorts of flaws we have found in published gadgets". Microsoft notes that gadgets installed from untrusted sources can "harm your computer and can access your computer's files" and perhaps importantly change their behavior at any time so a once trusted Gadget could go rogue with no warning. "An attacker who successfully exploited a Gadget vulnerability could run arbitrary code in the context of the current user" Microsoft warns, adding "If the current user is logged on with administrative user rights, an attacker could take complete control of the affected system".

Unusually, perhaps because the revelations at Black Hat are due to take place before the end of the month, or perhaps because it had already decided to kill off the Gadget platform in Windows 8 anyway, Microsoft has opted not to wait for the next Patch Tuesday updates to handle the problem but instead issue a 'Fix It' tool that will totally nuke the Sidebar and Gadgets from your system. Something it recommends users do 'as soon as possible'. The Desktop Gadgets Gallery has already vanished from the Internet, and notes that Gadget developers are already "shifting their efforts to the online Windows Store" in readiness for Windows 8 anyway.

So, have you disabled Windows Gadgets yet? I have...

Edited by Dani: Unstuck

Votes + Comments
i want to need window7 software

As Editorial Director and Managing Analyst with IT Security Thing I am putting more than two decades of consulting experience into providing opinionated insight regarding the security threat landscape for IT security professionals. As an Editorial Fellow with Dennis Publishing, I bring more than two decades of writing experience across the technology industry into publications such as Alphr, IT Pro and (in good old fashioned print) PC Pro. I also write for SC Magazine UK and Infosecurity, as well as The Times and Sunday Times newspapers. Along the way I have been honoured with a Technology Journalist of the Year award, and three Information Security Journalist of the Year awards. Most humbling, though, was the Enigma Award for 'lifetime contribution to IT security journalism' bestowed on me in 2011.

7
Contributors
7
Replies
15
Views
5 Years
Discussion Span
Last Post by chiccosilva
1

Did you set up Homegroup for networking in Windows 7?
Homegroup only works with Windows 7 computers and will not talk to your XP computer.
If so, you will need to change the networking system to one that XP can use.

On your Windows 7 computer, click the Start button at the bottom left of the screen, then go to the Control Panel and choose Network and Sharing Center. Click the link under "view your active networks" (if you've set up a Homegroup,the link should say "home network").
In the next window choose "Work network" that will switch you from a homegroup to a workgroup so your two computers can talk to each other. Before you can network the computers, you must assign the same workgroup name to both of them and SHARE folders in Explorer.

The XP computer's internet problem is not related the above. If your broadband modem is connected to the router and the router is connected to each computer your should not have any problems. If you are using a wireless connection you may have changed the ID or keyword when you installed the Win 7 computer.

Good Luck

Votes + Comments
Have something to contribute to this discussion? Please be thoughtful, detailed and courteous, and be sure to adhere to our posting rules.