What are the security risks with Sidebar Gadgets? Vista Features Discuss What are the security risks with Sidebar Gadgets? in the Windows Vista forums; I've done some searches with "vista gadgets and security" on the net, but the only links that came back were pointing to using gadgets to monitor security ...

I've done some searches with "vista gadgets and security" on the net, but the only links that came back were pointing to using gadgets to monitor security of your computer.

I am concerned with gadgets that compromise the security of my computer, but I found no such information.

Has anyone else done any research in this area? If so please share your findings.

[ultralexy]

I think you're right to be concerned about the security of sidebar gadgets. Sidebar gadgets are mini-programs that have full-user rights and could be a source of exploitation in the future. I'm not aware of any present dangers, but Ill keep my eye out for new threats. As well, any gadget you download, you should be sure to trust the source. As they gain in popularity, I'm sure they'll be enticing to virus-writers.

[ProCookie]

Yeah when i was into making Sidebar gadgets i was suprised how easy it was to make them and i think someone could easy slip a nasty bit of code in there. I'm a wary of gadgets and tend to only install official ones or ones that have been hghly recommended.

[ultralexy]

Good point, Anthony, they are super easy to code, and can be written in a variety of script languages as well as C# or C++ making them quite a useful source of exploitation, in my opinion.

[Znod]

Originally Posted by jemw

I've done some searches with "vista gadgets and security" on the net, but the only links that came back were pointing to using gadgets to monitor security of your computer.

I am concerned with gadgets that compromise the security of my computer, but I found no such information.

Has anyone else done any research in this area? If so please share your findings.

I saw one article dealing with gadget security issues. I'll try to find it. Well, here is one, but not the one I was looking for: http://www.networkworld.com/news/200...c=rss-security. Maybe this is the one I am recalling: http://news.com.com/Symantec+sizes+u...3-6163035.html.

One the other side of the coin, check out the security that might be provided by gadgets: http://netsecurity.about.com/od/secu...stagadgets.htm. Oh, I see; you may know about these.

Originally Posted by Znod

I saw one article dealing with gadget security issues. I'll try to find it. Well, here is one, but not the one I was looking for: http://www.networkworld.com/news/200...c=rss-security. Maybe this is the one I am recalling: http://news.com.com/Symantec+sizes+u...3-6163035.html.

One the other side of the coin, check out the security that might be provided by gadgets: http://netsecurity.about.com/od/secu...stagadgets.htm. Oh, I see; you may know about these.

In the first URL that you listed, the author states "It is easy to open up gadgets and check the code, says Chien. So, if you know anything about coding, you can easily detect if a gadget is malicious. On the other hand, because most gadgets are written in script languages, it is also quite easy to add to the existing code and modify the gadget. Some frameworks do prevent gadgets from being modified, but gadgets are easily modified in Vista, he says." But the author neglects to tell you how to EASILY open up gadgets and check the code.

ANT: Since you have coded one, any tips on the best way to find, let alone check them?

[dazzlin]

I'm not sure they would be any less secure than any other application you would choose to download and install on your computer. As with all things, be careful.