Serious flaw discovered in Windows Vista's Explorer


Recommended Posts

At a time where everyone is anxiously awaiting the upcoming service pack for Windows Vista (and while others flock back to Windows XP in droves), yet another flaw in the Windows Vista operating system has been discovered that can bring the Windows shell ("Windows Explorer") to its knees within 20 seconds. Even worse, this issue occurs under every day usage of the operating system if you use the Search function regularly with boolean search operators.

  1. Click on Start, and then click on Documents.
  2. In the Search entry box, type "NOT Shortcut" (without the quotes).
  3. Click on the "Save Search" button and save the search query as "Search Test".

This has been confirmed as a flaw in Windows Vista (all editions) and Windows Vista 64-bit (all editions), and even worse, the issue still occurs on the latest release candidate for Service Pack 1, and has been marked as "will not be fixed". The bigger question is, will Microsoft step up to the plate and fix this issue or will they let it pass on by while they work heavily on Windows "7", ignoring the fact that Windows Vista still has flaws and inconsistancies that are seeing larger companies hold back deployment until 2009 or even skip Vista?

Source of instructions to reproduce issue: ActiveWin.com

Holy cow, think of the countless people who will be put into shambles, i mean, people search for NOT Shortcut all the time, and i for one always save my queries as search test.

We can only curse at things like this because WinFS would have certainly avoided such problems.

*sigh*

:ike:

Acdtually, all three major components of WinFS IS in Vista, in the forms of Instant Search, VSC and som other stuff.

It doesn't crash my system :s

Windows Vista Home Premium with the RC of SP1.

It crashed my system without SP1, but didn't crash with SP1 so this is fixed with SP1 I guess. Either way, why is anyone searching for NOT shortcut in the first place? I mean most people search for specific files, not everything on their damn system. This is a non-issue IMO.

I love how people quickly defend Microsoft's Vista OS when people find issues with it. The right thing to do is expect this bug to be fixed. There is no excuse for not fixing a bug. You pay good money for it and in exchange you expect support for it, especially a the price tags of Vista's many flavours, why would you defend its flaws?

I'm not saying XP or anything else is perfect, but for christ sake people this is a PIECE OF SOFTWRE, not a cult or religion. Yes the person who posted about this bug probably hates Vista but it's a bug nevertheless regardless if the person is a Vista hater or supporter and a bug should eventually be fixed. It's as simple as that.

I love how people quickly defend Microsoft's Vista OS when people find issues with it. The right thing to do is expect this bug to be fixed. There is no excuse for not fixing a bug. You pay good money for it and in exchange you expect support for it, especially a the price tags of Vista's many flavours, why would you defend its flaws?

I'm not saying XP or anything else is perfect, but for christ sake people this is a PIECE OF SOFTWRE, not a cult or religion. Yes the person who posted about this bug probably hates Vista but it's a bug nevertheless regardless if the person is a Vista hater or supporter and a bug should eventually be fixed. It's as simple as that.

Yes, the bug should be fixed, but I don't care if they get around to fixing it in Vista SP1 or SP5 - I'll never encounter it, period. I'm more concerned about memory leaks and actual bugs that hamper my experience then some obscure bug I'll never accidentally encounter.

Please let us know when it proves to be a remotely exploitable buffer overflow that is usable as a program loader. Then we can upgrade its status to either serious or critical. At this point it's just a minor irritation, something that is in every version of every OS I've ever worked with. Pttht!

Interesting fallout from this...

Going back to 14 months ago...

I'm at the Microsoft Windows Vista October Beta Tour and am in one of three groups of ~40 of the Vists Beta Testers invited to spend 2 days at Microsoft, and Robert McLaws ( owner & admin of www.windows-now.com ) happens to be in my group - a very easy-to-talk-to guy who also knows what he talks about. I got to meet alot of very interesting people and renewed some very old (around 20-years-ago) friendships with former co-workers from various former employers.

...fast-forward to present time...

I see that the original post that generated this thread and the one on ActiveWin came from Robert's site - which causes me to raise my eyebrows slightly. I click on the link for the originating blog entry....and get ZIP from the website. I go back and see the list of Bloggers on the site, locate the author's blogs...and am greeted with this page. I go back and try to click on the actual blog entry - which now takes us back to the top of the Blogs section.

It's nice to see a site admin who has absolutely zero tolerance to buffoon-posts from buffoons. Give Robert a pat on the back, folks.

IMHO, this whole issue has got to be the biggest non-issue with Vista ever - and is near-perfectly timed to coincide with the end of 2007. Kinda nice to end the year with a whimper.

--ScottKin

Alright, so I published this over at Windows-Now.com (it does not display on the front page), I figured that I would post it here as well before my account here is deleted.

Alright, so after being harassed, flamed, and torn apart for the past ~24 hours via instant messenger and e-mail (which has resulted in me having to delete my personal e-mail account) about a post that I made on this website in regards to an issue that was found in the Windows Vista Explorer Search module, I've decided that I should come forth a little bit with you all.

Let's begin -- several years ago, during the Windows Code-name "Longhorn" era, I teamed up with Chris Holmes, someone who I consider to be a good friend, to work on several "guides" for tweaking the operating system, at the time I was only representing myself under the screen name "Nighthawk", although further into the Windows Vista beta I decided to use my actual name on the guides, as I felt it represented a step forward in professionalism in something that I enjoyed doing.

First and foremost, the reason that I posted the information regarding the flaw is because I was contacted by Microsoft stating that they would not be fixing the bug for Service Pack 1, which in my mind is a little bit boggling -- so I figured that a little bit of attention on this flaw would perhaps give someone over in Redmond a bit of a push to get this resolved, because it is a valid issue.

I've heard things such as "You're a [expletive] idiot for posting this", and "why the hell would you search for NOT Shortcut anyway?" This doesn't just apply to "NOT Shortcut", it applies to anything with "NOT".

You could search the folder for "NOT Music" or "NOT Peanuts" for all I care, it still crashes the process. I would have never thought that I would receive this kind of response to something like this, and I am truly disappointed. It seems as if some have reached a point where it doesn't matter if the operating system is full of bugs, as long as nobody speaks negatively about it, then all is well.

Unfortunately, I'm not the kind of person who will stand by and not take a stand for what I think is right. As an enthusiast and a human being, I cannot pretend and stand by to do what is "right" for the community, and no matter what the cost is, I cannot and will not continue with things in this state.

I was recognized for my contributions with the Microsoft MVP award in October for 2008, in the competency of Windows - Shell/User, which I felt was a real accomplishment and I was quite proud of myself. I've always had the passion to write -- and I focused primarily on Windows documentation, tweak guides, and tips & tricks. But unfortunately, after all of this, I've almost lost the inspiration and the passion to continue with my work as a Windows enthusiast. I've seen an extreme amount of distaste against what seems to be the truth lately, and that anything that doesn't go with the flow is automatically picked apart by fanboys and ego-maniacs.

At this point in time I would like to inform each and every one of you, and any of my readers out there, that I am pulling out from any current projects, tweak guides, and tips & trick guides, along with any involvement that I have with the community at this point in time. I'm going back to living my life, without being harassed over a blog post that I thought would be informative. With that being said, I do not know if I will be returning due to what seems to be a growing trend with "fanboyism" and the sheer amount of immaturity and disrespect that I have received in the past 24 hours.

To my fellow enthusiasts whom I have collaborated with over the years, including Chris, Mahmoud Al-Qudsi (author of EasyBCD), my friends at Microsoft Corporation, I wish you all the best and thank you for your assistance, guidance, and friendship. To Robert, the owner of Windows-Now.com, I would like to thank you for allowing me to host my information here on Windows-Now.com, and apologize if my previous blog post has caused you any grief.

I wish you all the best in the New Year and that you all take care of yourselves. Thank you for taking the time to read this entry.

Wow, I am completely astounded by this thread. All Kris did was post about an issue that was found in Windows explorer that Microsoft said they would not fix. He gave it a bit more of a public light in the hopes that it would kick someone over at Redmond in the ass and make them actually fix something for a change instead of senselessly closing the bug as "Not Reproducable".

The part that really gets me is that the same people who are flaming Kris about this, because it is not a "real issue", are the same people that bitch and moan all day long about vista being "****" and how it has so many issues. Umm hello? Anyone else seeing the irony here, or do you people just like to bitch for a living?

If there's one thing I've learned over the years, it's that you just have to stop caring about what other people have to say about you, because 99% of it is bull**** coming from immature little losers anyway. You guys may have succeeded in pushing out a great member of the community, I hope you're all happy now. I for one would not be pushed out like this because I don't pay any attention to senseless comments like this. I just stepped in now because this really needs to be addressed because it IS getting out of hand. Who CARES if you don't think it's an issue? In my book, ANYTHING that can crash a component of windows without adding a 3rd party plugin/application into the mix is a bug that MUST be fixed. Oh well, I don't even know why I'm wasting my breath on this, I'd probably make more progress talking to my walls.

Thanks for your kind words, Kris.

I know I speak for a lot of people here and in the rest of the online community when I say that no matter what transpired over the past couple of days everyone will certainly miss your contributions.

I'm shocked in disappointed in the reaction of many people as well, one would have expected a higher level of maturity when dealing with such issues, especially when they're being disclosed in good faith with the intention of getting them fixed, not flamebaited.

I wish you luck, wherever it is you choose to go from here.

Wow, I am completely astounded by this thread. All Kris did was post about an issue that was found in Windows explorer that Microsoft said they would not fix.

I think it's the sensationalist headline that most people have a problem with. It's not a serious flaw, by any means. A serious flaw (for example) would be an exploit that allows somebody to take over my computer remotely without me having to do anything. Not something that I type into the search field that crashes Explorer for a few seconds.

Steve.

Alright, so I published this over at Windows-Now.com (it does not display on the front page), I figured that I would post it here as well before my account here is deleted.

Instead of admitting that you blew it way out of proportion you choose to call everybody else fanboys? Comon, you could do better than that.

[Cross posted to Windows-Now]

We faced an issue with Vista. The issues? A few bugs being blown out of proportion, people thinking the beta of Vista was the final quality, people running Vista on CRAP hardware, and the most important; the blogosphere hating Vista.

So people started getting defensive of Vista against the stupid Mac heads and Linux heads. What happened here is that people got TOO defensive. We as a community are turning into the communities of zealotry, which we so despise, one of the principal reasons that we use Windows. We are becoming fanbois, and throwing our own under the bus.

What we all need to do is unite as a single community, drop these community wars, and start collaborating and trying to help Microsoft make a better operating system. Not say "IT IS PERFECT THE WAY IT IS!" I for one refuse to be part of a community where we must accept the OS as perfect, or be a "DUMB MAC FANBOI!" I am neither.

I have a genuine fear for where Windows and the community are going. Currently Microsoft seems to be trying to emulate Apple, and is doing so poorly. Microsoft is trying to follow a model that does not allow their community to make MAJOR change in their products. They are building up walls when they should be taking them down. As a community we are moving towards a model where we either must hate the OS to get Microsoft to change it or we need to defend it to the point where we spam one of the longest and smartest members of the Windows community, who deserves nothing less than our respect! It is absolutely disgusting to me that all these new comers to the beta scene think they have the right to harass one of the longest standing members of the community, and that they are smarter than someone who deserves nothing but respect. At this point today I am ashamed to call myself a part of what the Windows community has become, this Windows Community. Any of you who took part in the events of the last 24 hours, or any sort of extreme zealotry at all, should seriously rethink whether they should or deserve to call themselves Windows Enthusiasts.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • One big question about Mars was answered thanks to Einstein's 100 year old theory by Sayan Sen Image via DepositPhotos Scientists at the U.S. National Institute of Standards and Technology (NIST) have calculated how time passes on Mars compared with Earth, adding detail to how timekeeping would need to work beyond Earth’s orbit. The study, published in The Astronomical Journal, found that clocks on Mars run an average of 477 microseconds, or millionths of a second, faster per day than clocks on Earth. A microsecond is one millionth of a second, a very small unit used in precise scientific timing systems such as atomic clocks, which measure time using consistent atomic behavior. This difference is not constant. Because Mars moves around the Sun in a non-circular path (an eccentric orbit, meaning its distance from the Sun changes over time instead of staying fixed) and is affected by gravity from other bodies, the daily difference can vary by as much as 226 microseconds over a Martian year. The study also identifies smaller repeating changes of about 40 microseconds per day linked to synodic cycles (repeating periods that describe how planets line up with each other as they orbit the Sun from different positions). These longer patterns affect how time differences slowly rise and fall. To make these estimates, researchers compared Mars with Earth and the Moon. The work looks at relativistic proper time (the time actually measured by a clock depending on its speed and the strength of gravity where it is located, as described in Einstein’s relativity). This shows that each world has its own slightly different “rate” of time. This becomes more important as space missions expand into cislunar space (the region between Earth and the Moon) and toward Mars. On Earth, time systems rely on atomic clocks and satellites, which stay closely synchronized for navigation and communication. The study is based on Albert Einstein’s theory of relativity, which shows that time is affected by gravity and motion. Stronger gravity makes clocks run slower, while weaker gravity makes them run faster. “The time is just right for the Moon and Mars,” said NIST physicist Bijunath Patla. “This is the closest we have been to realizing the science fiction vision of expanding across the solar system.” A day on Mars is about 40 minutes longer than on Earth, and a Martian year lasts 687 Earth days. But the main question is not just about days and years, but how fast time itself passes. An atomic clock placed on Mars would function normally, but compared with one on Earth, the two would slowly drift apart due to differences in gravity and motion. This requires careful calculation of what is similar to a time-zone difference across planets. Researchers modeled Mars using a reference surface and included gravitational effects from the Sun, Earth, the Moon, and other planets. This includes a multi-body gravitational system (often described as a three-body or four-body problem, where predicting motion becomes difficult because multiple large objects all pull on each other at the same time through gravity). Mars also follows a Keplerian orbit (an idealized elliptical orbit based on simple gravitational laws that assume smooth motion, before adding real-world disturbances from other bodies). In addition, the researchers accounted for solar tides (small changes in gravitational force caused by the Sun that slightly distort planetary motion and timing, especially in systems involving Earth and the Moon). These combined effects are described as relativistic proper-time offsets (small but measurable differences in elapsed time between locations caused by gravity and motion), which must be included when comparing clocks across planets. “But for Mars, that’s not the case. Its distance from the Sun and its eccentric orbit make the variations in time larger. A three-body problem is extremely complicated. Now we’re dealing with four: the Sun, Earth, the Moon and Mars,” Patla explained. “The heavy lifting was more challenging than I initially thought.” Although the differences are extremely small, they matter for navigation and communication systems that depend on precise timing. Even modern networks on Earth, such as mobile systems, rely on timing accuracy at very small fractions of a second. Communication between Earth and Mars currently takes about four to 24 minutes or more depending on planetary positions, meaning signals are not real-time. A shared and accurate time system could help future missions reduce confusion in navigation and data exchange. “If you get synchronization, it will be almost like real-time communication without any loss of information. You don’t have to wait to see what happens,” Patla said. Researchers note that fully developed interplanetary communication networks are still far in the future. However, understanding how time behaves across planets helps prepare for those systems. “It may be decades before the surface of Mars is covered by the tracks of wandering rovers, but it is useful now to study the issues involved in establishing navigation systems on other planets and moons,” said Neil Ashby. “Like current global navigation systems like GPS, these systems will depend on accurate clocks, and the effects on clock rates can be analyzed with the help of Einstein’s general theory of relativity.” Patla added that the results also help improve understanding of time itself under relativity. “It's good to know for the first time what is happening on Mars timewise. Nobody knew that before. It improves our knowledge of the theory itself, the theory of how clocks tick and relativity,” he said. Source: NIST, IOPscience This article was generated with some help from AI and reviewed by an editor. Under Section 107 of the Copyright Act 1976, this material is used for the purpose of news reporting. Fair use is a use permitted by copyright statute that might otherwise be infringing.
    • TeraCopy 4.0 Build 26 by Razvan Serea TeraCopy is a compact program designed to copy and move files at the maximum possible speed, also providing you with a lot of features. Copy files faster. TeraCopy uses dynamically adjusted buffers to reduce seek times. Asynchronous copy speeds up file transfer between two physical hard drives. Pause and resume transfers. Pause copy process at any time to free up system resources and continue with a single click. Error recovery. In case of copy error, TeraCopy will try several times and in the worse case just skips the file, not terminating the entire transfer. Interactive file list. TeraCopy shows failed file transfers and lets you fix the problem and recopy only problem files. Shell integration. TeraCopy can completely replace Explorer copy and move functions, allowing you work with files as usual. TeraCopy is free for non-commercial use only. For commercial use you need to buy a license. The paid version of the program includes the following features: Copy/move to your favorite folders. Save reports as HTML and CSV files. Select files with the same extension/folder. Remove the selected files from the copy queue. TeraCopy 4.0 Build 26 changelog: Added support for receiving files via the LocalSend protocol. Improved exception handling and automated bug report upload. Fixed several minor bugs and small memory leaks. Build 26 (June 24) Fixed a rare exception when a transfer completed. Features added since version 3.17: Enhanced speed graph. New multi-threaded copy engine. Support for copying to multiple targets. Queue system for managing multiple copy operations. Support for receiving files via the LocalSend protocol. TeraCopy entry in the modern Windows Explorer context menu. Integrated toolbar in the title bar. Why receive LocalSend transfers with TeraCopy? Handle file conflicts: Skip, overwrite, or rename files when a file with the same name already exists. LocalSend always creates another copy, which can waste time and disk space, especially when resuming an interrupted transfer. Filter unwanted files: Apply ignore lists or remove files manually before accepting a transfer, so unnecessary files are not downloaded. Better performance on fast networks: In tests over a 10 Gbps connection, TeraCopy received files several times faster than the standard LocalSend app on Windows. Download: TeraCopy 4.0 Build 26 | 14.5 MB (Freeware, paid upgrade available) View: TeraCopy Website | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Briefly used Turbo Pascal (and Turbo C++) in 97 and soon after that I bought PC magazine that included a full version of Delphi 2. I still use Delphi today, some 29 years later.
    • Age of Empires Mobile comes to PC, here's how to carry over progress from your phone by Ivan Jenic Image: YouTube/Microsoft Microsoft just released Age of Empires Mobile for PC. The game, officially called Age of Empires Mobile: PC Edition, is available for free on Steam and Microsoft Store, almost two years after its initial release for handheld devices. Age of Empires is one of those franchises that entire generations grew up with. The original came out in 1997, and immediately got people hooked to building civilizations and crushing their enemies on the battlefield. However, the franchise today is a far cry from its roots, as Age of Empires Mobile is, well, a game optimized for handheld devices, and not a classic RTS title we’ve all loved for years. And, of course, it includes in-game purchases. The PC version is still a mobile game at its core, but it’s been optimized for desktop play. There’s mouse control, full keyboard compatibility, and a refined UI. Microsoft also refreshed the visuals with some 4k textures, so the game should look better on larger screens. The game supports Crossplay, so you can switch between your phone, tablet, and PC without losing anything. But linked progress doesn’t come out of the box, as you have to enable it first. Here’s how to link your progress: On your mobile device, open Age of Empires Mobile. Go to Settings (Gear icon) > Account. Select Bind Account and choose a sign-in option. Once you enable account binding, sign in on PC using the same method, and your progress will be accessible across all your devices. Xbox Game Pass subscribers also get a bonus reward pack on PC, which includes: 1 Monthly Pass Token 1 Custom Resource Chest 10 Universal 60-Minute Speed-Ups 1,000 Empire Coins Exclusive Player Portrait Frame You can find more info about Age of Empires Mobile: PC Edition, as well as download links, on the Age of Empires official website.
    • Apple Watch Series 11 GPS just crashed to 30% off in this fast-moving Prime Day deal by Karthik Mudaliar The Apple Watch Series 11 is available for $279, down from its $399 list price, saving buyers $120, or 30%. Amazon labels the offer as selling fast, so the current price may not remain available for long. This GPS model features a 42mm aluminum case, an Always-On Retina LTPO3 OLED display capable of reaching up to 2,000 nits, and an Ion-X glass surface with improved scratch resistance. Apple rates Series 11 for up to 24 hours of normal use or up to 38 hours in Low Power Mode, with fast charging providing up to eight hours of use from a 15-minute charge. Health and fitness tools include sleep scoring, temperature sensing, ECG support, heart-rate alerts, workout tracking, sleep apnea notifications, and hypertension notifications, where available. The watch also carries IP6X dust resistance and 50-meter water resistance. This configuration is best suited to iPhone owners who want comprehensive health tracking, notifications, contactless payments, and workout data without stepping up to a larger or cellular-equipped model. The smaller case should also appeal to buyers who prefer a lighter watch, while the S/M band fits wrists measuring 130mm to 180mm. With the current generation now significantly below its usual retail price, this is a strong time to replace an aging Apple Watch or buy a first model without compromising on Apple’s newest health and display features. Grab the discounted Apple Watch Series 11 (sold and shipped by Amazon) Good to know This Amazon deal is U.S. specific, and not available in other regions unless specified. We only use first-party seller links (at the time of article publishing); ensure that you purchase from a first-party seller link only. Check out Today's Deals on Amazon | or our recent tech deals. Become a Prime member (for Students or SNAP) via Neowin Get Prime Access - Prime for half price (for qualifying Medicaid, EBT, SNAP) Subscribe to Prime Video, Audible Plus, Music Unlimited or Kindle Unlimited via Neowin As an Amazon Associate, we earn from qualifying purchases.
  • Recent Achievements

    • One Year In
      Philsl earned a badge
      One Year In
    • Dedicated
      Scoobystu earned a badge
      Dedicated
    • First Post
      Tom Schmidt earned a badge
      First Post
    • One Month Later
      D0nn13 earned a badge
      One Month Later
    • Rookie
      +ChiefOfNeo went up a rank
      Rookie
  • Popular Contributors

    1. 1
      +primortal
      460
    2. 2
      +Edouard
      177
    3. 3
      PsYcHoKiLLa
      124
    4. 4
      Michael Scrip
      79
    5. 5
      Xenon
      76
  • Tell a friend

    Love Neowin? Tell a friend!