Microsoft can acces your settings menu through bing while allowing to open ?

[William Gaatjes]

What is really weird and reminds me of the old days : Internet explorer during the windows 95,98se, w2000 and windows XP, days with all security flaws. The time that the Opera browser, a virus scanner and a good ol' software firewall with all features like sygate at the time...
I do have to say that this also works with firefox and probably also chrome...

If you click the link below the image, when clicking on open color setting, the settings (cogwheel) menu window will open from windows 10 and probably windows 11 as wel.
Is this not a security flaw ? Or a possible vector ? If i have the right vocabulary ?
See image,

change taskbar color windows 10 site:microsoft.com - Bing

Intelligent search from Bing makes it easier to quickly find what you’re looking for and rewards you.

www.bing.com

 

[Steltek]

What is really weird and reminds me of the old days : Internet explorer during the windows 95,98se, w2000 and windows XP, days with all security flaws. The time that the Opera browser, a virus scanner and a good ol' software firewall with all features like sygate at the time...
I do have to say that this also works with firefox and probably also chrome...

If you click the link below the image, when clicking on open color setting, the settings (cogwheel) menu window will open from windows 10 and probably windows 11 as wel.
Is this not a security flaw ? Or a possible vector ? If i have the right vocabulary ?
See image,

View attachment 105252

change taskbar color windows 10 site:microsoft.com - Bing

Intelligent search from Bing makes it easier to quickly find what you’re looking for and rewards you.

www.bing.com

Usually, the first time you do it in any decent browser you should get a pop-up box asking if you want to allow bing to access settings. If you disallow it, then and Bob's your uncle and you don't have to worry about it any more.

Being able to do this is one of the consequences of MS using a browser-based interface within Windows (previously based upon IE, now Edge) to access apps.

 

[William Gaatjes]

Usually, the first time you do it in any decent browser you should get a pop-up box asking if you want to allow bing to access settings. If you disallow it, then and Bob's your uncle and you don't have to worry about it any more.

Being able to do this is one of the consequences of MS using a browser-based interface within Windows (previously based upon IE, now Edge) to access apps.

That is worthless, a browser based interface.

As a sidenote.
I still have issues accepting why in heavens name microsoft decided to render 2D images in a 3D engine.
That 2D engine took like a whole 2 watts to accelerate and render the 2D windows viewport.

 

[Steltek]

That is worthless, a browser based interface.

As a sidenote.
I still have issues accepting why in heavens name microsoft decided to render 2D images in a 3D engine.
That 2D engine took like a whole 2 watts to accelerate and render the 2D windows viewport.

It is Microsoft. Go figure. "Logic" isn't a state of mind that reigns there very often...

 

[WelshBloke]

I don't have edge installed in my win11 so I'm curious to see what happens with that link in Firefox!
Will report back later!

 

[William Gaatjes]

It is Microsoft. Go figure. "Logic" isn't a state of mind that reigns there very often...

Well, don't be so hars. I remember reading that there is a competition system going on between those that make windows lean and mean, save and secure and proper functioning and those that want to add every bell and whistle that is out there and possible to add.
It is an endless fight. I wish i could still remember the name of the blog of the high in hierarchy progammer manager that writes about how every day life is working for Microsoft. What customers want, and what needs to be created in order to stay relevant.
A Windows 2000 UI would be nice but with the security features that are common these days, like for example that random address layout or something like that, randomizing access to key functions in the kernel at every boot or i think reboot as well.
It is fun to see that stardock can make every thing that is hidden reappear again in windows 10 and 11. Even give the old windows 7 alike startmenu for windows 11.

 

[WelshBloke]

I don't have edge installed in my win11 so I'm curious to see what happens with that link in Firefox!
Will report back later!

Just opens up a blank web page with the address "ms-settingsersonalization-colors"

 

[Steltek]

Just opens up a blank web page with the address "ms-settingsersonalization-colors"

You've disallowed it at some point in the past then or are running some sort of web blocker like NoScript that prevents it.

The link will actually work in any unprotected browser if you allow it to by answering yes to the "Open settings?" pop up box. You won't get that popup box if you have a blocker installed.

 

[William Gaatjes]

I find it a huge security leak to be honest.
There is a huge list of commands available.
See website below.
Most do not seem to work on my system.
That is, only the ugly ass windows 10 settings menu pops up with a search bar.
I have a sweet tooth fot the good ol' control panel with all its beauty.


If there is a way to use a known or not publicly known exploit of those programs to gain administrator or so called root access to the system. The owner of the pc is done for it.
It is better to remove all this. Make windows lean and mean, save and secure.
As another example : My android phone has all these unwanted services running to connect to all kinds of stuff i do not want.
Of course there are passwords and enable/disable options but in busy times it is no longer doable to keep track of all those options and stay safe.
Android phones are not save either. Just like windows, too much forced (wireless) connection methods while the user never use these available options.
Android(Google & telephone manufacturers that supplies there own versions of android alike) should be forced just like windows(Microsoft) , that the user can uninstall unwanted services and applications.
Only what is desired should be installed.
That limits the amount of attack vectors available for (d)evil hackers.

List of ms-settings URI commands to open specific settings in Windows 10

This wiki document lists ms-settings URI commands that you can use to open any settings page in Windows 10 Control Panel. You can use the command via the Run dialog. For example, to open Printers & Scanners panel you can just type this command:- ms-settings:Printers & scanners ContentsHow to use...

4sysops.com