Removal of Internet Explorer |
The idea of removing Internet Explorer from a Microsoft Windows operating system was first proposed during the United States v. Microsoft case. Later, some security advocates took up the idea as a way to protect Windows systems from attack via IE vulnerabilities. Whether the net benefit of removing IE exceeds the cost, and indeed what it means to remove IE , are disputed.
Simply installing and using another browser does not prevent third party programs and core operating system components from using IE libraries. Thus, a user who does not use IE to browse the Web can still be targeted by attacks against vulnerabilities in these libraries—for instance, via Outlook Express or the Windows Help subsystem. However, removing the IE libraries will cause these programs, and other software which depends upon them, to cease functioning or even to crash the system.
It is unclear what it means to remove IE because such a removal depends on being able to determine which files or functions on an installed Windows system are part of IE — that is, to draw a line between IE and the rest of Windows. Microsoft has held that this is not meaningful; that IE is no longer (as it was prior to Windows 98) a separate piece of software, but simply a brand name for the Web-browsing and HTML-displaying capacities of the Windows operating system. In this view, the result of removing IE is simply a damaged Windows system; to have a working system without IE one must replace Windows entirely.
In contrast, some programmers and security writers have held that it is possible to have a useful and working Windows system with IE excised. Consultant Fred Vorck, who advocates that consumers should have the choice to remove integrated features of Microsoft Windows [http://www.vorck.com/remove-ie.html]; Dino Nuhagic, who is the creator of to remove and manage Windows components [http://www.litepc.com/], have all suggested removing Internet Explorer from computers in order to decrease exposure to security risks on the Internet [http://redmondmag.com/features/article.aspeditorialsID=439].
It is possible to remove Internet Explorer from Windows 95, 98 and ME (see instructions on the Netscape website [http://wp.netscape.com/browsers/using/ieusers/start/removing.html] and on Microsoft s website [http://support.microsoft.com/default.aspxscid=kb;en-us;q192852]), as well as from Windows 2000 [http://www.vorck.com/remove-ie.html], Windows XP [http://www.nliteos.com/], and Windows Server 2003 [http://www.nliteos.com/] at installation time.
One of Microsoft s arguments during the United States v. Microsoft trial was that removing Internet Explorer from Windows may result in system instability. At least one commentator supports this argument, and notes that removing Internet Explorer will also disable Windows Update, leaving the user without vital security updates to the operating system [http://www.stopie.com/stopie/removingie/]
Microsoft s position is in contrast with other operating systems and browsers. Other operating systems typically include at least one browser—for instance, Safari in Mac OS X. However, in these systems the web browser can be removed or replaced like any other application.
An alternative way to protect a local network is to [http://tlog.dehumanizer.com/2005/08/29/limiting-internet-explorer-to-windows-update/ limit Internet Explorer to] Windows Update only.
=See also=
*Internet Explorer|
|