.NET Framework 3.5 SP1 Allows managed code to be launched from a network share!

Brad Abrams : Poll: Allowing .NET EXEs to run off a network share

Brad Abrams : Poll: Allowing .NET EXEs to run off a network share — Thu, 14 Aug 2008 09:48:47 GMT

PingBack from http://blogs.msdn.com/brada/archive/2007/10/26/adhoc-poll-allowing-net-exes-to-run-off-a-network-share.aspx

re: .NET Framework 3.5 SP1 Allows managed code to be launched from a network share!

Dirk — Thu, 14 Aug 2008 12:48:37 GMT

Couldn't this be done using CAS before?

re: .NET Framework 3.5 SP1 Allows managed code to be launched from a network share!

sambo — Thu, 14 Aug 2008 13:17:20 GMT

I heard a lot of featured in .NET 3.5 SP1.

re: .NET Framework 3.5 SP1 Allows managed code to be launched from a network share!

netsam — Thu, 14 Aug 2008 15:25:20 GMT

windows has enough problem with its owm. Now it adds more security venerability.

re: .NET Framework 3.5 SP1 Allows managed code to be launched from a network share!

John — Thu, 14 Aug 2008 15:32:58 GMT

".NET Framework 3.5 SP1 Allows managed code to be launched from a network share!"

You make this sound like some great new feature. It isn't. It's a bug fix. Yeah, I'm glad Microsoft fixed this, but it isn't something you should be proud of. Fixing this in 2008 doesn't diminish your guilt for allowing this bug to exist for 5+ years. How much pain has this caused your customers over that time? Do we get some compensation for our aggravation? This was not some technically difficult problem. It was simply a bad design choice, which you persisted in and defended long after it was apparent to everybody else that it was wrong.

re: .NET Framework 3.5 SP1 Allows managed code to be launched from a network share!

Francois Ward — Thu, 14 Aug 2008 16:14:31 GMT

I'm not sure I get it. This was always possible via CAS for those who wanted it. You could even push it as a policy via a domain, so you wouldn't need to do it computer by computer...

So I always thought it was a great design choice originally, since it is in line with the "secure by default, unlock the risks you want on your own" mindset which works quite well in the Unix world.

So why exactly was the default changed? Or is this something more?

re: .NET Framework 3.5 SP1 Allows managed code to be launched from a network share!

Scott Bruno — Thu, 14 Aug 2008 16:21:56 GMT

Yay, thank you Vance. In lieu of flowers please accept this beer []?

For those of you wondering why this is a good idea, let me just say if this hasn't been a problem for you then just be happy for the rest of us.

re: .NET Framework 3.5 SP1 Allows managed code to be launched from a network share!

Tester Bob — Thu, 14 Aug 2008 16:27:18 GMT

If this "bug" wasn't fixed before, then the world was not ready for it to be so. Now it is. We would not exist without Microsoft so show some respect.

re: .NET Framework 3.5 SP1 Allows managed code to be launched from a network share!

Jimmy Bergmark - JTB World — Thu, 14 Aug 2008 17:31:34 GMT

Does this work with existing applications or is a recompile needed?

re: .NET Framework 3.5 SP1 Allows managed code to be launched from a network share!

Andrew Robinson — Thu, 14 Aug 2008 18:48:11 GMT

Followup to Jimmy's questions, does this require an app target the 3.5 framework or will any old 2.0 app work?

re: .NET Framework 3.5 SP1 Allows managed code to be launched from a network share!

BradA — Thu, 14 Aug 2008 19:14:29 GMT

Jimmy\Andrew -- No, an existing application does not have to be recompiled or changed in any way to take advantage of this. Your current 2.0 Applications will just work, you don't have to target anything new in 3.5..

re: .NET Framework 3.5 SP1 Allows managed code to be launched from a network share!

Vincent — Thu, 14 Aug 2008 23:01:00 GMT

Quoting Vance Morrison: "The problem is that failing to run managed code WHILE STILL ALLOWING UNMANAGED EXE's to run, does not provide any security (because hackers will simply use unmanaged code)"

Thanks god! And what's next? CHM help files? If you follow the same logic I believe CHM files on a network share are not that much of a security problem...

re: .NET Framework 3.5 SP1 Allows managed code to be launched from a network share!

Gerry — Fri, 15 Aug 2008 10:57:19 GMT

Installed .NET Framework 3.5 Service Pack 1; NBC OLYMPICS site no longer played Silverlight video; then uninstalled SP1 and then OK again. (Playing Silverlight 2 Beta 2).

re: .NET Framework 3.5 SP1 Allows managed code to be launched from a network share!

Jimmy Bergmark - JTB World — Fri, 15 Aug 2008 16:02:25 GMT

Thanks for the confirmation. This makes the news even better!

.NET Framework 3.5 SP1からネットワーク共有先にある実行ファイルを実行可能に

OPC Diary — Sat, 16 Aug 2008 04:07:06 GMT

Brad Abrams : .NET Framework 3.5 SP1 All...

re: .NET Framework 3.5 SP1 Allows managed code to be launched from a network share!

BradA — Sat, 16 Aug 2008 04:52:36 GMT

Gerry - I am sorry you have run into this issue... I personally have the same configuration and my machine works great. One theory is that your user agent string might have gotten corrupted. Type this into the browser address bar and send me the results (brada@microsoft.com).

javascript:document.write("<br/>userAgent string:"+navigator.userAgent+"<br/>");

re: .NET Framework 3.5 SP1 Allows managed code to be launched from a network share!

Gerald Dorman — Fri, 05 Sep 2008 20:23:41 GMT

On 8/15/2008, I sent you this message:

Installed .NET Framework 3.5 Service Pack 1; NBC OLYMPICS site no longer played Silverlight video; then uninstalled SP1 and then OK again. (Playing Silverlight 2 Beta 2).

You responded with your suggestion that User Agent string was the problem.

Finally, I received notice that IE does have a bug. You can see the response at Microsft Connect, Bug ID 362923.

Thanks for you great help.

.NET Framework 3.5 SP1允许从网络共享中调用托管代码了！

Joycode@Ab110.com — Sun, 07 Sep 2008 18:38:13 GMT

【原文地址】 .NET Framework 3.5 SP1 Allows managed code to be launched from a network share! 【原文发表日期】 13 August

re: .NET Framework 3.5 SP1 Allows managed code to be launched from a network share!

Seth — Fri, 31 Oct 2008 16:05:47 GMT

@netsam:

You just made my day: "... security venerability"

ROTFL

I hope that was an intended typo, in which case you get the full bonus points!