



WinFS - Who Will Actually Use It? 106
Hel Toupee asks: "Tom's Hardware is running an article about the file system to be employed in Windows Longhorn, the to-be-long-overdue successor to Windows XP. According to the information that the authors could get out of Microsoft, WinFS seems to be little more than an indexing and searching service that sits on top of NTFS or FAT. It is also very flexible and extendable, which, for Microsoft, can mean 'slow' and 'exploitable'. For instance: quite a bit of the inner workings of WinFS rely on XML data tags which can allow 'for instance, that developers will additionally be able to automatically display or execute commands linked to items located by a specific search'. This seems to imply that the new generation of spyware only has to change a bit of XML and it can add entries to your context menus, or open webpages when you click on a file, or, since files can be grouped by content in 'virtual folders', spyware could effectively add entries to these folders, or reorganize your entire filesystem on the fly -- all with slight tweak in some XML file! Am I being paranoid? WinFS seems fairly insecure, and I will not be using it if given a choice. What's your take?"
Re:Am I being paranoid? (Score:3, Interesting)
Re:Am I being paranoid? (Score:2)
As far as what the paranoid dude is talking about: an indexing file system will just mean it will be easier to search for what you are looking for. Instead of having a particular name, you can search on attributes. Natural language queries will follow shortly thereafter. Microsoft is making a very smart move
Re:Am I being paranoid? (Score:2)
Re:Am I being paranoid? (Score:2)
User data is the stuff that *should* be backed up frequently, so losing it shouldn't be too much of an issue.
Having the inner workings of the system tinkered with is far more serious. It could be some long term damage that would render your frequent backups useless.
Re:Am I being paranoid? (Score:2)
Re:Am I being paranoid? (Score:2)
A) You have a backup from which you can restore the user data. (If you don't have a backup you obviously don't care for the data. Harddisks die sometimes.)
and
B) Modified user data is (more) easily detected (than modified system programs) since its used often and directly by the users and is "data", as opposed to "programs".
Changes to programs and to parts of the operating system can be used to camouflage manipulations of user data long enough to render all backups virtually useless.
Yea
Re:Am I being paranoid? (Score:2)
Re:Am I being paranoid? (Score:1)
The 'many users, single machine' concept is obsolete, except in cases of servers, where it's really a resource-sharing connecting point, not a true 'multi user' machine.
The new concept, at least for tech people, is 'many machines, single user' as in: KVM switch and a bunch of machines running various OSes and programs.
The UNIX multiuser concept is as obsolete as timesharing machines with big banks of dumb terminals connect
Re:Am I being paranoid? (Score:2)
Re:Am I being paranoid? (Score:2)
Re:Am I being paranoid? (Score:1)
Terminal Server.
As in, Microsoft has one for windows....
Now, STFU
Re:Am I being paranoid? (Score:2)
All users would not be affected.
The '70s called, they want their mainframe back.
Re:Am I being paranoid? (Score:1)
Re:Am I being paranoid? (Score:4, Insightful)
Windows is braindead and inconsistent in this respect. Much software still wants to piss in it's Program Files directory and will refuse to run unless it is run as Administrator.. other programs require it because of sloppy coding.
You'd think you could set everything in the Program Files directory to be writable by Admin only, but it doesn't work because of this.
Also, when you install software, it is unpredictable as to what it will do; whether it will put it's icons in the All Users start menu or in the current user's one.
So, basically, all there is to do is run as Administrator.. the system is nearly unusable otherwise.
Re:Am I being paranoid? (Score:2, Insightful)
I mean, hell, I could easily write an OS X program that tried to store all its data into a system directory and required an administrator account to run... would people suddenly declare that Apple screwed up, or that my program is crap?
Look at the software Microsoft writes: All of it is perfectly usable as a plain-jane user account, just as it should be. If other software developers wrote software
Re:Am I being paranoid? (Score:2)
Also, Microsoft doesn't help matters by shipping Windows XP with the default user account as Administrator or Power User.. software can still dump stuff everywhere, so less-skilled developers don't even likely realize what they are doing is wrong.
In fact, by default large areas of the hard drive are open to all users, where as in *nix, a regular user can'
Re:Am I being paranoid? (Score:3, Informative)
Look at this; It needs full read/write access to C:\Temp, C:\Winnt, C:\Winnt\System, (these ones are already wide-open in a default install), C:\Program Files\Office 97, and a bunch others.
This makes it basically impossible to secure a Windows box..
Re:Am I being paranoid? (Score:1)
Your example is entirely worthless. It's perfectly acceptable for Office 97 to expect that, just as it's acceptable for a MacOS 9 program to expect that, because there's no true multi-user support in the OS.
Find a *current* application designed to run with modern copies of Windows and I'll be convinced.
Re:Am I being paranoid? (Score:1)
Hmmmm last time I checked you needed (or at least SHOULD be root to write to those dirs).
Again if you allow your users to have open write access to those directories I feel for you. But if you know of some way I can say
Re:Am I being paranoid? (Score:2)
I know very well how to install a program as the Admin user. The point is, the software does not work unless it is running as the administrator unless you give everyone read/write permissions on certain areas where they shouldn't need it (such as the Program Files directory, and so on).
That's just poor programmin
Re:Am I being paranoid? (Score:1)
I realize some require a little tweaking here and there to not require admin privs. to run. But MOST programs are multiuser aware now.
But I would like to know just one... because I have yet to find one. NOTE - the *IF* installed properly.
Re:Am I being paranoid? (Score:2)
VCDEasy burning software [digital-digest.com]
Medal of Honour: Allied Assult Spearhead Multiplayer Demo [3dgamers.com]
There's lots of others..
Re:Am I being paranoid? (Score:1)
Re:Am I being paranoid? (Score:1)
It's lots of stupid things. PaintShopPro 8 with a straight install from the admin account, clicking the "make available to all users", boom it only worked for admin.
Lots of other crackers like Need For Speed Underground, which saves the save games in /Documents and Settings/All Users. Now what on earth were they thinking there?
Re:Am I being paranoid? (Score:2)
What is amusing, in a narrow minded way, is that *nix advocates continually and endlessly fail to acknowledge that these applications that won't run unless you're admin are third party. They're not developed by MS. Microsoft business apps run quite well without admin privelege. Yet the parent blames Windows!
If these developers started writing must-have killer applications for Linux, and made them so they'd only run
My take ? (Score:5, Insightful)
after all we weekly encounter new and exciting ways spyware/viruse/worms/etc. screws up windows.
Re:My take ? (Score:5, Funny)
First it will be the default... then it will be the only choice.
This is, of course, the optimist in me... the pessimist says that you will be lucky if this is as bad as it gets.
It could very well be a "transitional" file system. The final file system will actually live on your bank's system... making the movement of money from your account to their's all the more seamless.
The end goal is to create one massive grid computing system that constantly funnels money from the banks of the world into MS's coffers.
Re:My take ? (Score:3, Insightful)
Re:My take ? (Score:1)
Well, thats too bad for them. Computers were invented for Scientists and other smart people ONLY - they were invented to be used by people with some intelligence.
Computers are still designed for smart people -- for everyone else, there's windows(R) (c) (tm)!
Re:My take ? (Score:3, Informative)
Consider - the window manager I use (icewm) has a menu file saying what programs appear on the start menu. It is possible for a program (including a worm) running as my uid to change that menu so that clicking on 'xterm' runs something else instead. This does not mean icewm is insecure.
The p
Take some Ritalin (Score:4, Funny)
It's too fscking early to say.
Stop talking out your ass and speculate on something important, like Episode III.
Re:Take some Ritalin (Score:1)
Re:Take some Ritalin (Score:3, Insightful)
Re:Take some Ritalin (Score:2, Funny)
Re:Take some Ritalin (Score:3, Funny)
Speculate? I know it will suck.
Re:Take some Ritalin (Score:2)
Slashdot's take: (Score:1, Flamebait)
Well, we have absolutely no information about how WinFS works, nobody here has actually used it, and it isn't even finished yet... but it comes from Microsoft, so it's probably slow, exploitable, and an attempt to abuse their monopoly powers.
Security (Score:5, Insightful)
Re:Security (Score:4, Insightful)
and seems it is not a worry for end users too. End users always thinks bad things happens to someone else. That's why a poorly designed security model IS a problem. OTOH, it is an end user problem, something here on slashdot could be used as base for jokes.
Woah, hold on (Score:4, Insightful)
Re:Microsoft knows it (Score:1)
Registry (Score:3, Insightful)
Re:Files are not files anymore (Score:4, Insightful)
How do we know which part of a 1gb file should lie in memory, and which should not?
it's not a filesystem matter.
It's just like a big database where we need good rules of what's good and what's not.
I, for one, hope that won't be microsoft to choose what's good or bad
Re:Files are not files anymore (Score:1)
Well, it will be, if everybody else just remains mired in 'ye old UNIX ways.'
Re:Files are not files anymore (Score:3, Informative)
Have you looked at the 2.4+ Linux Kernels. Or for that matter the BSDs or OSX, the fact is that UNIX and its workalikes are perfectly capeable of handling large disk I/O tasks. Especially with Journaling file systems like JFS or XFS, hell even ext3 does a decent job. This is annother example of Microsoft "innovating" in an attempt to beat a proven solution (EX. putting IIS into the Win2003 kernel) The fact remains that a good journaling filesystem, with a swap partition, more than likely is a muc
Re:Files are not files anymore (Score:3, Informative)
Files are still files; the WinFS is a layer above an existing FS.
No matter how you call them, files or Objects or whatever concept you like, if a file is 1GiB big you'll have trouble. You might have a 1KiB metadata file describing it, but when you ac
Re:Files are not files anymore (Score:2)
Tim
Object-oriented file systems (Score:1)
I hope the USPTO considers expired patents in their prior art searches on the WinFS IP submissions.
Re:Files are not files anymore (Score:2, Insightful)
Why? Because using normal files is just too slow. E.g. How do we know which part of a 1gb file should lie in memory, and which should not?
Actually, for interactive cases this is easier on Linux/Unix than on Windows because of the structure of the *nix inode. It allows for very easy random access of a file, so, like the other example, you can scroll randomly about your 1 gig file in vi
are you serious? (Score:4, Insightful)
Now, I know about MS' track record with security just as well as the next
And if it just ends up being a layer on top of NTFS that lets people sort their music and vacation pictures, well, I'm not too worried about it yet. And if it turns out that it's a security risk, then you *turn it off*, or just use FAT32.
Patents (Score:4, Interesting)
We've seen too many patents granted for which there certainly appears to be prior art. Someone else brought up the moniker, "Object Oriented Filesystems," and danced around the concept of single-level-store. That stuff goes back to the old IBM System/38, whose patents have probably expired. (It actually goes back further, but S/38 made it out the door.)
As others have said, metadata has been on the Apple resource fork since 1984, and OS/2's HPFS had Extended Attributes (OS/2 even had Extended Attributes kludged onto FAT.) prior to 1990. Then you (and others) bring up Reiser4.
I wonder what the patent filings on WinFS will look like. Reiser4 is obviously "published", but it would be good if there were some way to make the USPTO aware.
Re:Patents (Score:2)
Re:Patents (Score:2)
Re:Patents (Score:1)
But have they threatened?
I seem to remember a Linux project or two shut down under 'suggestion' from Microsoft.
Chilling Effect is the key phrase.
Re:Patents (Score:1)
Don't they need to become self-aware first? :>
Re:are you serious? (Score:2)
And if it just ends up being a layer on top of NTFS that lets people sort their music and vacation pictures
A system like that could be quite valuable, even though the description doesn't sound like much.
I've often thought the concept of VFolders from Evolution could be introduced into *NIX filesystems to great benefit. Something like systems of symbolic links you can create to get alternate views of your nested directory structures.
Thus, one organizational structure might look like "./project_A" "./pro
Re:are you serious? (Score:1)
The problem is, people will always go with the default. That's why they're using Windows to begin with! What makes you think they'll sit, engage their brain cells, and do something other than the default filesystem view? The number of Windows users who will actually use this functionality is exactly equal to the number of Windows users who reorganize their menus: approximately six worldwide.
Re:are you serious? (Score:1)
Generally people are intelligent and creative, despite thinking in so many different ways. They just have no concept of what's possible or impossible with computers, nor any idea of how to do some of the possible things, nor a sense of whether they'll "b
Re:are you serious? (Score:1)
Hans knows what you mean (Score:2)
Re:are you serious? (Score:1)
Bah Apple did it before (Score:5, Informative)
In the HFS filesystem, a file has two forks, a data fork, that corresponds to the file data in Windows or Unix file-system, and a resource fork, that contained structured data, basically bits of data that had an attached id, name and type.
Resources were used to store all kinds of stuff. This was very convenient, as you could for instance store the window shape of a text document in the resource fork without affecting the content of the file (data fork). This was also used to store custom icons, text styling without actually affecting the data. You could even use it to embed fonts into word documents.
The trick is, the OS used resources extensively, an application typically had an empty data fork and lots of resources (icons, pictures, sounds, windows, dialogs), including 68K code segments.
One Macintosh virus, WDEF [llnl.gov], used this mechanism to propagate. What the virus did, was add resource of type WDEF to the database file describing all the icons on the desktop. WDEF resources were window definition code. So when the Finder (file explorer) opened this database file for a given volume, the resource would get loaded and overloaded the default window drawing code, thus enabling the virus to execute and spread.
Re:Bah Apple did it before (Score:5, Informative)
NTFS has "Streams", essentially a more generic case of the HFS. You don't just have two forks, you have a nearly infinite number of forks/streams, with the unnamed stream being the "normal" file. Windows uses this forks for file descriptions and a few other things. But nearly nobody knows this feature. It seems even the virus programmers don't (ab)use it.
Google found [google.com] among others this page [diamondcs.com.au] explaining those streams a little more.
The most evil thing about streams is that you can only see the default stream using "onboard" tools like "dir" or the Explorer.
Tux2000
Re:Bah Apple did it before (Score:1)
Re:Bah Apple did it before (Score:2)
And now it's been mentioned on Slashdot.
"It seems even the virus programmers don't (ab)use it."
Bet a few of them just got some ideas.
Re:Bah Apple did it before (Score:2)
Some of the files had special names. !Boot and !Run, for example; !Boot was executed when the application was first seen by the filer (and did things like load the application's icon, register file types, etc) and !Run was executed when the
Re:Bah I don't believe it :) (Score:1)
"and I will not be using it if given a choice" (Score:5, Insightful)
You will not have a choice.
Re:"and I will not be using it if given a choice" (Score:1)
If you won't be able to make such a trivial choice as that in a few years, then you might as well give up now. The OS they make you run will be the least of your worries.
Nothing to worry about, folks (Score:5, Insightful)
Re:Nothing to worry about, folks (Score:3, Informative)
I haven't had (spy|ad)ware for years either. My solution [gentoo.org] is a bit more comprehensive [linux.org] than a browser [mozilla.org], however. ;)
Re:Nothing to worry about, folks (Score:2)
Re:Nothing to worry about, folks (Score:2)
Well... (Score:2, Insightful)
MSDN article posted yesterday (Score:1)
While the article date is December 2003, the date on the front page of msdn.microsoft.com [microsoft.com] is January 28, 2004.
Does not sound like a problem to me (Score:4, Insightful)
Windows already has the file associations like knowing that clicking a
Compare with a worst-case scenario where the system only had a "run this file" command and you could not determine what it did because it was encrypted into the file system (sort of what you really fear WinFS would do). Then somebody hijacking the
I do worry about some peoples intentions for meta data. In my opinion meta data should be used *only* as a "cache" of data that could be determined from the file itself. An obvious example is an image preview. But the file type and program should also be figured out using a program like the Unix "file" command and the result cached in the metadata. You could even make schemes by which the author, owner, permissions, date and time, and even filename are considered cached metadata and determined from the file contents. We should not have to rely on the correct transmission of anything other than the "data" bytes and the file length in order for a program using a file to do the correct and predictable thing.
I am worried that in fact most recent ideas in filesystems are going exactly the wrong way, and in fact Microsoft may be doing this right for a change.
Re:Does not sound like a problem to me (Score:2, Insightful)
How is this less secure? (Score:2)
Argh (Score:2)
Prepare for Karma burn in 5..4..3..2..
I guess nothing in the Linux world considered "flexible" and "extendable" can be considered "slow" or "exploitable"?
*cough* *cough* X-Windows *cough*.
Seriously, I don't like Microsoft any more than the next guy, but this kind of comment right on the front page shows why Slashdot has to be taken with a huge grain of salt to begin with. Let's all try to be a
Re:Argh (Score:2)
Despite the motto, slashdot is not a news site. It's a commentary site. If you're coming here looking for straight news with no opinion, you are coming to the wrong place. It is, to put it in programming terms, a feature, not a bug.
WinFS won't bother me much. For a while, at least. (Score:3, Insightful)
Let's see:
Can we really expect anything better? (Score:1)
My take? (Score:2)
Who Will Use It? (Score:1)
Re:Asshat supreme (Score:4, Insightful)
"For traditional file-based data, such as text documents, audio tracks, and video clips, WinFS is the new Windows file system. Typically, you will store the main data of a file, the file stream, as a file on an NTFS volume. However, whenever you call an API that changes or adds items with NTFS file stream parts, WinFS extracts the metadata from the stream and adds the metadata to the WinFS store. This metadata describes information about the stream, such as its path, plus any information that WinFS can extract from the stream. Depending on file contents, this metadata can be the author (of a document), the genre (of an audio file), keywords (from a PDF file), and more. WinFS synchronizes the NTFS-resident file stream and the WinFS-resident metadata. New Longhorn applications can also choose to store their file streams directly in WinFS. File streams can be accessed using the existing Win32 file system API or the new WinFS API."
So, it seems that the files themselves are still stored in a filesytem, it's only the metadata that is stored in "WinFS".
The data itself does *not* live as a blob in a giant database.
Nice, call people idiots based on your (most likely) incorrect interpretation of something you haven't seen, or (it seems) researched.
Re:Asshat supreme (Score:2, Informative)
This sounds exactly like the Desktop Database in Mac OS8/9, with a few extra fields.
Now, how is this new exactly?