Jump to content

[Question] is .NET as bad as everyone says?


joll69

Recommended Posts

that's my question...is .NET framework 1.0, 1.1, or 2.0 as vulnerable and open to exploit as so many ppl say? i dont recall ever seeing an advisory from m$ or any security firm saying they've found a vulnerability...

can someone perhaps post some links to show it is? :huh:

thanx in advance..

Link to comment
Share on other sites


is .NET framework 1.0, 1.1, or 2.0 as vulnerable and open to exploit as so many ppl say?

ummmm, just who are these 'as so many ppl say?'

I havent heard or read this anywhere.

Could you quote a reputable source other than your neighbors brother?

shark

Link to comment
Share on other sites

@XPero if I install Windows with .Net Framework 2, why is asking WU for 1.1?

That's a good question I cannot fully answer. My guess is that 2.0 hasnt 100% backward compatibility, but I would say it has 95%. Maybe other member can answer that better than me. The thing is that I've never had any problems with "older" .NET apps and I'm using only 2.0 final.

Link to comment
Share on other sites

In fact if you install windows & apps for many pcs you must install both versions of .net to keep compatibilty ...

If it's just for you, you can try to install just .net 2 ...

.net api doesn't touch the security of windows ...

Link to comment
Share on other sites

I wanted to install one small app, about 1mb. It said .NET Framework 2.0 was needed. DL'd .NET 2 (around 25mb) and installed it. It unpacked some 200mb + into my XP installation and I think over a meg of registry entries.

I always try to keep my XP 'lean and mean' and shy away from any bloatware programs, so naturally, was uncomfortable with the addition of .NET to my system. Anyone know if it has any impact on performance in any way, even miniscule? It probably doesnt, still dont like the idea of hundreds of extra MB's on my system just for the sake of one or two small programs that need it.

Link to comment
Share on other sites

.NET 2.0 is the only thing you need. Some programs might have a file like *.exe.config, and if it doesn't, then make one with the main executable replacing the asterick. Then paste it the following content:

<?xml version ="1.0"?>
<configuration>
<startup>
<supportedRuntime version="v2.0.50727" />
</startup>
</configuration>

@amenx

It is possible to find only the libraries that the program in question needs, then placing those files and the core .NET files such as mscoree.dll and mscorlib.dll (not full list) into the same directory as the program. I did that with MS Graphing Calculator and the libraries and required DLL's only took up an extra 10MB, much better than the 200MB or so of unneeded libraries.

Link to comment
Share on other sites

@amenx

can't agree more. i hate the bLOAt of .NET, all the files/reg entries and even a new user account and yet another service. at least nuhi, one of the nLite dev's, provides the runtimes so you don't have to install all the crap. i wonder if the runtimes could be made to work with other apps as well???

Edited by atomizer
Link to comment
Share on other sites

@Atomizer

I think by saying runtimes, you mean libraries? Because that is exactly what I was previously saying. By including them with the program, there is no need for any registry stuff, nor the rest of the bloat.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...