eidenk, on Nov 15 2005, 01:12 PM, said:
Quote
i) there are security issues with it (potential or otherwise...)
I don't know about that but WBEM is possibly a security risk.
As far as I am concerned, too, I'm not sure about anything specific, but given the nature of WBEM in a 9x system, it would seem to present at least a potential security risk. Amongst other things, I understand that WBEM helps 9x to connect successfully to remote computers. WMI/WBEM helps to get over some of the barriers that otherwise exist between 9x & NT-based systems on a network. So, in aiding this connectivity, it would seem also to increase the chances of a successful remote attack. However, what I don't know is whether WMI/WBEM somehow 'hardens' 9x connections - I don't really understand TCP/IP-stack stuff, but perhaps it somehow improves 9x in this way. Can any set me straight on this point?
eidenk, on Nov 15 2005, 01:12 PM, said:
Quote
ii) WMI/WBEM can affect system performance in a negative way
Wmi.exe gets loaded for no obvious reason and then runs as a background task (affecting performance and stability if I remember well).
I've read a relatively large amount about this. This seems to be the most-often talked about reason for getting rid of WMI/WBEM. I understand that there are bug fixes for NT systems, but many people on 9x systems (mainly ME) seem only to end their problems with WMI/WBEM's hunger for resources by removing it.
eidenk, on Nov 15 2005, 01:12 PM, said:
Quote
iii) another tool you use provides you with WMI/WBEM's functionality, with fewer negative issues
WMI is used by PC Health which allows you to get system information if I remember well. I use instead Everest and other softs. WBEM is Web Based Enterprise Management. I don't know what it exactly does but have never encountered any software requiring this component despite having installed thousands of software of all sorts.
Yeah. Other things I've read paint a picture of WMI/WBEM as "a window on the deep inner workings of... Windows", offering the potential of conveniently scrutinising system information across whole networks. Again, security concerns surface (for me), especially since 9x doesn't offer the possibility of user restrictions. But again, my ignorance prevents me from having any certain idea of how a specific threat could work (of course, I
have an idea). Incidentally, the page on MDGx's site linked in a post above explains how ME users can substitute their MSINFO32.EXE for 98/98SE's MSINFO32.EXE (providing they have Windows 98/98SE), since 98's version of System Information doesn't require WMI/WBEM to work.
This post has been edited by bristols: 16 November 2005 - 07:27 AM