Last Windows update creates C:\inetpub | Hacker News Reader

Last Windows update creates C:\inetpub

infosec.exchange

57 pointsN19PEDL231 comments

I haven't used Windows in years. But one of the main things that pushed me away was how they constantly just shit all over your hard drive. I used to keep a really, really clean Windows filesystem, but I wasn't able to keep it up after I started getting tons of folders called C:\fli32uf09823f0u32fj3209f8u. Total disrespect to your users.

Don't get me started on the services control panel. Where it used to be clear what was running and what wasn't. Now the whole OS just looks like Malware.

Agree 100%

Quick... "AarSvc_86dfc" service- malware or not?

Yeah not to mention everything now runs under svchost.exe. So when it spikes to 100% CPU usage, you can't actually figure out what's causing it easily.

But you know it has something to do with Windows Update.

After multiple decades of using Windows almost exclusively, I have never seen a folder named like that in the root of any drive, which leads me to conclude that your problem was cause by malware rather than Windows.

Going to go out on a limb and say that you must use it in a vacuum. I only have used Windows over the last decade in VMs and have seen this often with Windows tooling and updates. A quick search on the topic will confirm a lot of end users have experienced this sloppy system maintenance by Microsoft. [0]

[0] https://answers.microsoft.com/en-us/windows/forum/all/window...

No, the OP is correct. Windows updates totally did that. For the most part that stopped when Component Based Servicing got rolled out (Windows Vista).

Sorry, no, Windows always has and still does generate garbage all over your hard drive.

Most won’t notice or care. For those who do it’s infuriating.

I especially remember that Windows CE (or Pocket PC) carried this over to handhelds, a shitshow of random/temp files.

Small correction, Windows CE and Pocket PC weren't Windows so we didn't "bring it over". That mess didn't come later until windows phone.

In the defense of ce/ppc, we weren't really thinking about the fs as user visible so didn't give it much thought. Also, while I'm not shifting all of the blame, lots of that cruft was driven by OEMs as well. Our internal images were pretty clean on the fs from what I can remember.

Appreciate the clarification. It may not have literally been ported over, but it certainly felt like it was culturally imported. Anytime I used one of these devices it made me wince feeling like having a little messy desktop os in a piece of consumer electronics seeming more complex and fragile than it ought to be.

Yeah, I think you're right, it was cultural. For me, rather than the influence from Windows what I see is the focus on what we called "enterprise customers" at the time and leadership was obsessed about them because they were guaranteed huge orders for large numbers of devices. They largely don't exist as a thing anymore, BYOD killed them.

Enterprise customers and operators didn't view the fs of a mobile device as a thing the end user should manage or care about. So neither did we, or our OEMs (for the most part).

Of course, this is all just the opinions of one guy decades after the fact. For reference, I was a dev, lead, dev manager in the CE/mobile/phone teams from ~00-08 and contributed to ActiveSync, device PIM sync, device stability, and later worked directly with OEMs to design and build new phones (things like the Samsung BlackJack).

That looks like a folder created by malware. Crazy if Windows created folders like that on the regular. (I stopped using Windows regularly after Windows 7.)

I’d be willing to bet some internet karma that this was a simple mistake during packaging and an errant folder create was accidentally included. I’d be incredibly surprised if any IIS components are activated by this update or if anything beyond the folder existing is out of the ordinary for the system.

For anyone else who didn’t know (like me):

> inetpub is a system folder on Windows that gets created when you install IIS (Internet Information Services) — which is Windows’ built-in web server.

IIS: Talk about a throwback.

This sounds like some marketing stunt so microsoft can claim to be the most widely deployed website in the world, mostly by virtue of it installing itself to every windoze 11 desktop like most malware/potentially unwanted programs (pup).

It wouldn't be the first time they pull some shenanigans like that such as when they paid GoDaddy to switch their web parking from Apache to IIS circa 2005, and suddenly IIS was the most-used web server across (mostly parked) domains on the internet overnight as their marketing team quickly disseminated.

> This sounds like some marketing stunt so microsoft can claim to be the most widely deployed website in the world

If we wanted to play semantics like that Microsoft can technically claim one of the world's largest hypervisor deployments by sheer number of Xbox Ones and above all running Hyper-V in the living room? ;)

Don't be surprised if Microsoft deploys a Tailscale-like setup to implicitly stay connected to a fleet of Windows machines and then use this IIS setup to exfiltrate CoPilot logs when CoPilot receives a prompt and locally decides you are doing bad things.

Good god. And Microsoft wonders why people are so reluctant to install updates or upgrade to Windows 11.

MS, get your shit in order, and stop forcing AI slop, advertising and untested updates down our throats.

Why would they care. Like with every profit maximizing enshitification change since the end of 7 user will forget about it after a week of complaining instead of switching to alternatives.

At this point it's the 5 stages of a new windows version.

So what are we serving?

Now every computer is a web server, and as a bonus you run IIS.

IIS came with Windows years ago. I think it was even an optional component in Windows 98.

It was a terrible idea then and it remains a terrible idea now.

Yeah, the component was called "Personal Web Server", I poked it recently in 86Box.

This is the case with OpenBSD. It doesn't come with Apache turned on by default, of course, but it's a part of the base install as httpd.

The apache based httpd was removed and briefly (For two releases I think?) replaced with an nginx one, and is now a custom written web server.

Didn't they fork Apache 1.x?

at least we all know what apache is, what it does and doesn't do, when it's running and how to start/stop/remove it :)

god knows what a microsoft webserver is doing.

Some manager just had to use the opportunity to pull some bullshit

Reply on news.ycombinator.com