Learning more about Pointer Events as the W3C publishes Last Call Working Draft


On Tuesday February 19, the W3C published the Pointer Events specification as a Last Call Working Draft, a significant milestone in the path towards standardization and interoperability. Begun a little over 3 months ago, the specification aims to help developers more easily enable a new generation of Web experiences that work across input devices, such as touch, pen, and mouse. We’re pleased with the progress thus far in the W3C and wanted to share some of the latest resources available to help you build sites and applications for touch, pen, and mouse input using the APIs available in IE10 today.

Learning about touch-first Web design and Pointer Events

Pointer Events represent a new way to approach input in sites. As such, we want to help developers learn about the technology and how to build compelling experiences with it. Through our engagement with WebPlatform.org documentation, program manager Rob Dolin has added an extensive new primer that walks through Pointer Events and provides basic examples on how to get started.

Additionally, I was pleased to have the opportunity to speak at W3Conf in San Francisco, CA about touch-first design and Pointer Events. If you weren’t able to attend, the talk is available to watch online. This talk covers basic touch-first guidelines, and introduction to Pointer Events, and a walkthrough of migration from mouse events to Pointer Events.

If you’re not inspired yet to try out Pointer Events, here’s a few great Web experiences that use Pointer Events for a touch-first experience, with more to come in the future:

Using Pointer Events Today

IE10 supports Pointer Events (vendor prefixed) and enables you to take advantage of the millions of touch enabled Windows 8 devices in the market. “Same markup” continues to be our goal, and standardization is just one of the ways we’re helping make that a reality. In addition, Microsoft Open Technologies, Inc. (a subsidiary of Microsoft) has been collaborating with the WebKit community to produce an open source prototype patch of Pointer Events for the WebKit project. Web developers can take this early prototype for a spin using a Chromium build with Pointer Events released by AppendTo.

To further help Web developers take advantage of Pointer Events today, David Catuhe from Microsoft France has developed a JavaScript polyfill, called HandJS, to support Pointer Events in multiple browsers. Developers can include the script library in their page and write to the Pointer Event model to get the full experience of Pointer Events in IE10 and a graceful emulation in other browsers. David also has a demo to help you get started.

We look forward to the road ahead in standardizing Pointer Events as the Working Group moves towards the next milestone, Candidate Recommendation.

— Jacob Rossi, Program Manager, Internet Explorer

Comments (51)

  1. The publication dates of the articles are messed up? (O_o)

  2. Rob Colburn says:

    Open Source? Collab with competitors? Polyfils?  Nice new leaf MS.

  3. Daniel says:

    Blog comments are still broken!

    1.) Please acknowledge the bug

    2.) Please fix the bug

    Nothing else on this blog matters until this is resolved!

  4. snark maiden says:

    Daniel

    1.) get a free Microsoft account

    2.) sign in to the blog to comment with it, fixing the comment problem

    3.) this is weird bullet numbering

  5. pmbAustin says:

    I have to say, after using IE10 on a Surface Pro w/ Windows 8… and then trying out Chrome on the same box… Chrome is completely unusable in a touch environment.  Completely.  It's amazing how badly it responds to touch events, compared to how good IE10 responds.  Yet another place where Chrome needs to catch up with IE, and not vice-versa.

  6. Mayur Prayag ( India ) says:

    Current IE Team is not brilliant ,talented.They can't think from user's view.Steven ,Please Remove IE development team ,appoint new team like Windows 7 team or give project to Google ,they will develop IE like Chrome and later you tell world that we(Microsoft) developed "the IE"…..but finally we will get better IE ….Please reply me or guaranty me that future IE will be a benchmark …..the best…..better than Chrome……

    Below are IE's failure Reasons:

    1) IE's UI feels very heavy when first opened.

    2) IE is not simple means back button and forward button is not light.

    3) IE is slow

    4) IE takes more time when loading Facebook and Twitter…..!!!!!!

    5) Give IE's development to  "Google" and they will tell you how to develop a web browser.

    6) Please,copy the chrome UI ,responsiveness , simpleness…..then and then only IE will be great         otherwise whatever mini Internet,millions test you do ,it is of no use……

    7) chrome feels very light and IE feels like ton of load on our head..

    8) when we open any site IE ask for default browser in a very sluggish manner…

    9)  IE smart screen filter very slow takes much time

    10) Remove status bar from IE

    11) Take some development lessons from Google Team so that you can develop OS like Android and browser like Chrome….

    12) Within 3 years Google showed your position in market(Browser)…

    13) Microsoft is not very serious about IE…

    14) Current IE 9 is like Windows Vista ,make some strict steps and give IE 10 like Windows 7,8 performance …..

    15) Make proper Acid 3 tests,because when user sees Acid 3 tests after release on various sites,they give very less marks to Internet Explorer….

    16) Make UI clean,again I'm giving warning otherwise within 5 years you will lost completely..

    17) When we Right Click on empty space,a lot of items appear…..Remove many items(Translation etc) from right click

    18) Keep less items for Right click …..we want that

    19)Current IE Team is not brilliant ,talented.

    20)They can't think from user's view

                                                             Most Importantly, All will agree that,        "  Last thing ,we all people wanted that IE must beat chrome…….when we double click chrome icon on desktop ,it opens smoothly and feel softs,smoother …..whereas IE feels like scratches on our Screen,skin etc……!!!!!!!!!!!!!!!!.."

    I hope you will take a lesson from above .I'm an end user.

  7. Mark says:

    1.) no one wants a Microsoft account

    2.) no one trusts Microsoft with their data

    3.) the ability to use a blog comment form should not depend on the user magically knowing that the blog is tragically broken

    4.) if Microsoft is unwilling to put the 1 line fix in the blog at least take 5 min to update the blog indicating that users must save a copy of their post because the developers are unwilling to fix the blog

    5.) the PR damage this issue is causing Microsoft on a daily basis is out of control! I'm hearing from non developers now that Microsoft is not willing to listen to developers

    6.) ex-Microsoft employee Eric Lawrence has *REPEATEDLY* tweeted the errors on this blog and the issues with invalid cookies being served on it

    7.) Microsoft lost some of their best developers (Chris Wilson, Eric Lawrence,…) because they were unwilling to work with the community and address issues with developer community sites, the IE Blog and ditch the connect bug tracking tool

    8.) the developer/manager in charge of this blog should care about one thing and one thing only – maintaining this blog… And sadly they are failing to do so in epic proportions!

  8. @mark says:

    You should beteer direct your comments on the blog software (including your 5 minute fix) here:

    blogs.technet.com/…/3381848.aspx

    It is an old blog post but the project manager forthe MSDN and technet blog (John Wood) is stil active on the blogpost

  9. pmbAustin says:

    Mayur Prayag ( India ), you are just wrong.  If you like Chrome, go use Chrome.  I intensely dislike the Chrome UI for a great many reasons.  Stop posting that spam here.  

    Mark:  You're just wrong too.  A "microsoft account" is just an email address.  Everyone has one.  It takes 2 seconds to turn it into a microsoft account.  The Microsoft account is what makes all the magic in Win8 happen (sharing, syncing) and is used on Windows Phones, Windows 8/RT, and Office.  If the fact that the form times out for Unregistered, Unlogged in users bothers you (why should it?), then just freaking log in!  It takes two seconds, and you only ever have to do it once… it remembers from visit to visit.  All this WHINING you're doing just makes you look stupid and lazy.  STOP IT.  Stop spamming this board with your ridiculousness.

  10. IECustomizer says:

    touch api's changed in IE10 for win7 RTM?

    please see connect.microsoft.com/…/mspointerenabled-returns-true-for-ie10-rtm-on-windows-7

  11. IECustomizer says:

    Can we get Hand.js added to NuGet?

    http://handjs.codeplex.com/

  12. Jacob Rossi [MSFT] says:

    @IECustomizer – This is a known documentation bug that is in the process of being updated. IE10 for Windows 7 now supports pointer events for mouse devices. Pen and touch input will continue to simulate mouse input. MSGesture is not supported, but can be feature detected using if(window.MSGesture).

  13. Mark says:

    Is there a plugin/addon to get the Windows 7 theme back for IE10? I'm sorry but this Windows 8 skin is hideous and annoying to use!

  14. Yannick says:

    @Mayer –

    1) Uhm, it looks the same when you open it the second time, however, not heavy at all

    2) See point 1

    3) Except that a lot of tests showed us that it is the fastest browser for Windows 7/8

    4) See point 3

    5) They will tell you how to build a browser that is destroying the open web. Google is an add company and they should never turn to make a browser, the (mobiele) web is only hurt by it.

    6) If you lik Chrome so much, go and use it, but you can say goodby to privacy and security.

    7) See the previous 6 points

    8) But what's the diffrence with any other browser?

    9) Those 5 seconds it needs to keep your PC save, is that to much? However, you can simply disable it.

    10) Done in IE9, or actualy, disabled by default, but that's the case on every browser, except Opera.

    11) See point 5.

    12) Yes: rise, dissapear and return.

    13) Pointless, however, Google isn't serious about Chrome, it's all about getting information from there users, that's how you pay for Chrome: with your privacy.

    14) See point 3.

    15) IE9 and higher score 100/100 in Acid3, beside Microsoft doesn't make this things.

    16) IE10 UI doesn't have  any "fancy" effect anymore, good enough?

    17) You can also just remove all your plugins, beside, the most of the standard options are useful.

    18) Making points to let it seem you have a lot of points? See poin 17.

    19) Pointless point, again.

    20) See point 18 and 19

    And for you final, not counted point: "See point 14".

  15. Stefan says:

    One big concern I have with pointer events that I'd like clarification on (and suspect others would too!)

    IIRC Microsoft was endorsing switching most click type events to be pointer events… While I get the mission I think there is a critical omission.

    Switching to pointer events is TERRIBLE for a typical online form based application where events should not occur simultaneously (eg a user should not be able to click save and delete and edit and create at the same time.

    Using pointer events looks like a nightmare for race conditions at the moment so I'm holding back on them for now.

  16. @Stefan Don't see the difference with normal mouse click event emulation that often is used on browsers if the users fast touches on screen multiple buttons.

  17. Avalon says:

    @pmbAustin Wow! Take it down a notch there!

    I don't think I've ever seen such a rabid MS FanBoy Troll in all my time reading this blog.

    It is you that needs to stop it – stop reading with your blinders on and wake up and realize the status quo.

    Google Chrome is the best desktop browser available (and I say that as a dedicated Firefox user!) but to outright bad mouth it like you did shows immense bias and FanBoyism.

    As for this blog and the bug with posting comments signing in is not the solution! Fixing the blog is the solution! I must confess I'm shell shocked that Microsoft has failed to step up and fix this on such a prominent site that discusses web design and usability on a daily basis!

    If it was my job to maintain it I'd be expecting a pink slip every morning for failing to do my job. Period.

    I too do not have a Microsoft account and do not want one. If a company can't solve the basics like using the right cookies/certs on a blog and can't fix a basic comment form/legacy ASP bug in years why would I trust them for a millisecond with my private information?

    The solution is really simple – just fix the damn blog! It shouldn't take any developer worth their salt more than 15 minutes to fix it.  To continue ignoring it shows willfull incompetence and disrespect to the entire developer community.

  18. @Avalon says:

    So he's a "rabid Ms FanBoy Troll" because he doesn't like the chrome UI?

  19. Jacob Rossi [MSFT] says:

    @Stefan –

    If the application you're building is zoomable (default), then multi-touch contacts  will trigger zoom rather than click.

    If it's not zoomable, then you should check out the event.isPrimary flag. It's an easy way to build a first-one-down-wins experience, which is probably what you want for your modal interaction scenario.

    dvcs.w3.org/…/pointerEvents.html

  20. Mayur Prayag ( India ) says:

    @ Yannick

    1) According to u , everthing is good enough about IE 10.Then Can u please tell me So-Called " HTML 5 " score of IE 10

       in comparison with others.

    2) Why r there lack of all Add-ons in IE since it's inception. Other browsers have literally all add-ons,extensions ….(Like              ADBlock,crickinfo ,Glamsham..etc)

    3)  Why r we using 1995 dialog box of Internet Options ,why not METRO style new dialog (setting) Box so that all options r discoverable.

    4) IE 10 much more time while deleting History .Period.

    5) Address Bar is at Top left side instead of middle of screen.It takes pain while moving mouse from right to left.

    6) Why should not we get automatic .extensions while typing (Like .com,.org.,net) thus could reduce user's pain.

    7) There is not a Copy- And- Paste ,Copy- And -Go Option like chrome.I think Microsoft tries to give more pain to end users which is not their habit.( It's habit of UNIX Users…)

    8) Most important thing when u save a web page i.e. "Save Page As" it doesn't save page properly.Also it takes minutes

      to save page .

    9) It doesn't save page in background like Chrome so that we have to wait ideal while it saves it…Really bad for a

       company like Microsoft.

    10) while opening new Tab ,it takes more time .Take a lesson from Opera,Firefox.

    11) Build a Download Manager of IE like IDM so that we don't need IDM .we must able to download videos from IE's

       Download Manager itself.( It would be great idea…..what u think guys)

    12) Finally ,at last Print preview is like 20 years old box.It must be like chrome in-built in same window.

    13) Improve UI upto some extent

    14) Develop new version within a gap of 1 year.so that major OS includes best of the Best IE.

                                     If above points r done correctly, I don't think No one can come near close to IE.Guys I want reply from all of u .Microsoft team reply me….If this done, It would be my dream IE ever.Period….. Awaiting reply

  21. Mayur Prayag ( India ) says:

    Again there isn't Exclusive Internet Explorer Store like windows ,windows phone.

    Launch IE store so that All add-ons can be developed for IE.( Wishlist ADBlock  first……)

    reply me………….

  22. steve_web says:

    @Mayur Prayag

    For #8 IE being slow to save pages this is a known bug in IE.

    When IE goes to save a page it doesn't just copy the source it has already downloaded from the server… It makes a brand new request!!!!

    This if you just spent 3 minutes downloading the latest sales figures you're going to spend another 3 whole minutes (plus) to save that page!

    This bug was filed during the beta development of IE7… So although it is extremely annoying… Don't expect a fix anytime soon.  I'd look up the status of the bug in MS Connect but since Microsoft has repeatedly deleted all the bugs filed in connect I can't even look it up to tell you the status!

  23. @Mayur says:

    IF you want to get an HTML5 score then use the W3C HTM5 test suite.

    It contains 11907 tests

    http://www.w3.org/…/Testing

    That is a real conformance test (although still not complete).

    IE has addons. Even before firefox and chrome exited.

    For instance an adblocker can be found here: http://simple-adblock.com/

    A store is not required for IE addons

    However a store can be found here: download.cnet.com/…/internet-explorer-add-ons-and-plugins

  24. pmbAustin says:

    @Avalon: I too do not have a Microsoft account and do not want one.

    Then why are you even here, if you hate Microsoft and Microsoft products, and have no intention of using any of them?  You have an email address, right?  That's all a microsoft account is.  It can even be a gmail account.

    You really need to grow up.  Your outburst was unwarranted and unjustified in every possible way.

    My comments were about using Chrome on a touch screen, specifically, compared to IE10.  Acknowleding the FACT that Chrome sucks in this usage scenario, and IE10 works great does not make me a "rabid fanboy".  It makes me an observer of reality.   Apparently a simple fact like that touches a raw nerve with you.

    And you also choose to keep whining and complaining rather than take the two seconds to simply log in and bansh the problems with this site?   So you're a whiney idiot by choice?  Really?  Like I said, grow up.

  25. Avalon says:

    @pmbAustin (part 1 of 2)

    re: "Then why are you even here"

    I'm here like everyone else that develops for the Web/Mobile – even though IE is not my primary development browser I *NEED* to support it because some of my customers use it.

    re: " if you hate Microsoft and Microsoft products, and have no intention of using any of them"

    I don't hate Microsoft and I do not hate all Microsoft products (I'm actually a *MASSIVE* fan of Windows 7! MS Office, etc.)  I just find that like many 1,000's of other developers that IE is lagging behind in the market and like everyone else I want it to pick up the pace and become an equal contender.

    re: "You have an email address, right?  That's all a microsoft account is.  It can even be a gmail account."

    I realize that. Never denied it. But you keep ignoring my point.  I don't want to create a Microsoft account with my email address. More importantly I don't want to have to sign in in order to make a comment on this blog.  If Microsoft want to alienate the community by requiring a login because they can't fix the bug in their blog – that's fine too.  It will do untold damage to their already failing PR but it would solve the problem by hiding it.

    re: "You really need to grow up.  Your outburst was unwarranted and unjustified in every possible way."

    Pot – meet Kettle.  You are the one being offensive and rude.  I'm stating facts and trying to help solve the problem.

  26. Avalon says:

    @pmbAustin (part 2 of 2)

    re: "My comments were about using Chrome on a touch screen, specifically, compared to IE10.  Acknowleding the FACT that Chrome sucks in this usage scenario, and IE10 works great does not make me a "rabid fanboy".  It makes me an observer of reality.   Apparently a simple fact like that touches a raw nerve with you."

    Your exact quotes were: " If you like Chrome, go use Chrome.  I intensely dislike the Chrome UI for a great many reasons.  Stop posting that spam here. " and "All this WHINING you're doing just makes you look stupid and lazy.  STOP IT.  Stop spamming this board with your ridiculousness."

    You insulted Chrome without explaining what was wrong with it.  Then you insulted me multiple times and claimed that I'm a spammer.

    Apparently you're not aware what being rude and obnoxious is.  Let me help you out:

    lmgtfy.com

    re: "And you also choose to keep whining and complaining rather than take the two seconds to simply log in and bansh the problems with this site?"

    Yes! Exactly! That's what rationale people do.  Don't like your government charging you 67% tax? you raise your voice! Don't like that a website is broken? you notify the developers/maintainers that the site is broken (and even offer up a fix if you know how)  Find it frustrating that the #1 feature of a blog is the ability to provide feedback via comments and that part is broken? Then be the squeaky wheel and keep on the issue until it is resolved!  This blog is obviously not monitored by Microsoft very often/well as this issue hasn't got any attention since it was raised years ago.  My expectation is that readers will continue to complain about this on every single blog post multiple times until it is fixed.  3 words for you. Deal with it!

    re: "So you're a whiney idiot by choice?  Really?  Like I said, grow up."

    Thanks! Sling rude insults at my intelligence that's the sure way to prove you are the better more mature person.  Well proven!

    Since there likely is someone at Microsoft that is actually held accountable for this blog and how it affects the developer community and public relations for Microsoft I suspect that after a while they will realize this needs attention ASAP.

    When they fix it I'll let you thank me personally (any way you want) for getting it fixed so that comments can stay on topic on this blog.

    PS to post both these answers I had to post multiple times each.  The reason why developers are ranting about the subject and have been for as long as I can recall.

  27. Jonathan says:

    A major usability issue in IE10 textarea elements (all versions: Windows 7, Windows 8, 32bit/64bit) has been discovered that is a 100% regression from IE9.

    It was reported as bug #571 over on WebBugTrack webbugtrack.blogspot.ca/…/bug-571-ie-10-textarea-focus-is-broken.html a site which finds and reports many IE bugs (as well as other browsers).

    I sure hope this isn't just the beginning of a whole mess load of IE bugs due to the new silly Win8 gui controls!

    @Microsoft – please provide an ETA for a fix on this.  My tests indicate that this is not fixable even with the suggested workaround.

  28. India Rules says:

    giv ths projct to INDIAN GURUS.. they will make yur IE number 1!!!

    u all will seeee dat INDIA is nxt superpower.. always number 1!!!!!!

  29. George says:

    I think bug 571 is from the new UI controls. I also notice the scrollbars is slow to update to the correct size thumscrew when pasting in a bunch of text.

    In IE9 on windows 7 it was (and still is much faster).

    We first heard about the TextArea bug from our customers that thought we broke it in our latest app update but we discovered that it is a Microsoft bug.

    It would be really nice if there were a public bug tracker for IE so we could file bugs like this!

    (Yes we know about connect we mean a real bug tracker tool!)

  30. Trevor says:

    We only use Macs here but we got bug reports on the textarea issue too. At first we thought this was simply a user error but when we test on our cloud testing environment we noticed the issue on the IE 10 browser in the desktop (we don't support Metro at all).

    Can we get an ETA on the fix for this to tell our IE 10 users?  Will this be bundled with other fixes in a monthly patch (and if so have we missed the cutoff for the March patch or will we need to wait until April?)

    Obviously Microsoft doesn't have a very vigorous automated testing strategy for IE (and the manual testing needs to be more thorough.  Basic functionality slips like this should not make it into production code – ever!

  31. pmbAustin says:

    @Avalon: "I don't want to create a Microsoft account with my email address. More importantly I don't want to have to sign in in order to make a comment on this blog."

    Well then, it's your choice to suffer.  There is no effort or cost to creating a Microsoft Account and logging in.  Zero.  You can create a new email address at outlook.com for it if you want, or use an existing one.  Either way, there's zero cost, so you're just whining to whine, and you're just choosing to be in pain.  It's hard to have any sympathy for you.

    I'm not being offensive or rude, you are.  I'm merely stating simple and obvious facts.  Your constant trolling posts on this topic are as tiresome as they are unnecesary.

    And if you had just logged in (which has zero cost and takes zero effort), you wouldn't have had to waste so much time responding to me.  Again… no sympathy for you here.  And saying it's microsoft's fault you post off-topic here is like the abusive husband caliming his wife MAKES him punch her.  Seriously, grow up.  And stop it.  Either log in like everyone else, or stop whining.

  32. Jane says:

    @pmbAustin: re "There is no effort or cost to creating a Microsoft Account and logging in.  Zero"

    yeah except you have to create an account and login every single time you visit the blog! – e.g. a total waste of time since Microsoft should just fix their da** blog!

  33. Hmm says:

    Maybe Microsoft should just disable guest commenting

  34. Paul T. says:

    I think we can all agree that the comment form bug on this blog is ironically one of the worst bugs it could have and that Microsoft ignoring it is tiresome and disrespectful to the community.

    @pmbAustin your language and intolerance for others is completely unprofessional.

    If you have a comment for Microsoft about their browser great state it.

    If you have helpful advise for fellow developers, great, share it.

    However if all you can do is whine about other browsers and whine about fellow developers that are pointing out flaws and omissions in the IE browser, the OS it runs on or this blog then you are not helping anyone.

    As much as we want everyone to participate on this blog if you can't behave properly we will have to respectfully ask that you not return here.

  35. IE User says:

    This is a great post!

  36. Gordon says:

    @pmbAustin "log in like everyone else"???

    In case you missed it only 2 other people on this post logged in to write a comment so it is actually you that is in the minority.

    As for the bug just add a real submit button Microsoft! Stop trying to defend ASP technology to the grave.  The last browser without tabs was IE6 ever since then web apps have had to deal with this and legacy ASP postbacks simply don't. Time to upgrade your IE6 era code base blog!

  37. Michael says:

    IE10 final still fails test #1 (bug 361) on the "IE fail whale" test.

  38. steve says:

    On Windows 7 IE 10 there is a chunk of "randomness" at the end of my user agent string:

    ";EIE10;ENUSWOL"

    What is this? I thought Microsoft was going to stop stuffing garbage into the user Agent string?! On Windows 8 I don't have any of this "mini-puke" in my userAgent.

  39. Silver Moon says:

    What is the status of SSE ?

    when are you planning to implement it ?

    server sent dom events i mean, using new EventSource().

  40. @steve says:

    I just checked my windows 7 IE10 and its just "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)"

  41. @steve says:

    Hey little brat! Where are you getting this disinformation? IE's UA string is just fine. So shut your gob and get back to your video game.

  42. PhistucK says:

    @steve –

    Installed applications can add stuff to the user agent string. Like when you install the .NET framework. it adds something like "CLR 3.5" or something, so it is probably one of your installed applications and not Internet Explorer itself.

  43. Security Leak says:

    Regarding the security leak of mouse movements in IE from outside the browser window there is an update from the Spider.io blog about why this is such a major issue.

    As a user that needs to test web apps and research IE bugs/development info on a daily basis in IE it disturbs me very much that any one of the sites I visit **CAN** track my mouse outside of the browser even when not focused or even when minimized.

    Quote —–

    There are two other points in Microsoft’s post which we believe are important to clarify.

    Firstly, the post includes an ambiguous sentence: “There are similar capabilities available in other browsers.” It is important to clarify that other browsers do not leak mouse-cursor position outside of the browser window in the way that Internet Explorer does.

    Secondly, it has been suggested that exploitation of the vulnerability to compromise login details and other confidential information is “theoretical”, “hard to imagine” and would require “serving an ad to a site that asks for a logon.” This is not the case. Ads do not need to be served to sites requiring login details. Ads need only to be served to some page which is open in Internet Explorer. The page with an embedded ad may be in a background tab. The page may be minimised. You may be using an entirely different application—potentially a different browser or some other desktop application—to log in. As has already been noted on Hacker News, if you were to log in at either this banking website or this banking website using any browser (perhaps using your Chrome browser, for the sake of argument), then you would be vulnerable to attack if you had another page open in Internet Explorer, even if Internet Explorer was minimised. There are many similarly vulnerable sites and applications. Making the problem of deciphering n-edged mouse traces over the keyboards at the two example websites that much easier, these are in a fixed position. A fixed position is not required: identifying an n-edged trace that would constitute a trace over a virtual keyboard is not difficult. But if the keyboard has a fixed position, then this is a problem that Android users know has already been solved with uncanny accuracy: e.g. by swype. To get a better feel for the problem of deciphering mouse traces, we suggest readers of this post try this deciphering challenge.

    End Quote —–

    It would be really nice if Microsoft stopped with the PR babble and actually addressed the bug for what it is.  Don't play silly games saying that other browsers have similar issues unless you are going to explicitly point them out! Otherwise that is hearsay and slander.

    As for all Internet Explorer users – we are still waiting for a patch for this!

  44. Edward says:

    I love this! Microsoft invents new anti-community concept!

    You have to sign up and login in order to use the most basic functionality of a publicly open blog!

    It is the best way ever to alienate your customers, users, partners, developers, and future clients!

    Absolutely awesomely spectacular #Epic #Fail!

  45. @Edward says:

    Have you really never seen a blog that doesn't allow guest comments?

  46. Neville says:

    @"@Edward" I think Edward is pointing out the stupidity of having a blog with a seemingly functional guest posting option that doesn't require signin in fact it isn't even shown as an option to sign in – yet the experience posting is horrendous!

    There is a better than 50% chance that you'll type up a good paragraph or three of response only to see the blog eat your comment because it was programmed incorrectly using inferior legacy technology that should have been put out to pasture over 4 years ago!

    There's no warning, no option to save a draft, no feature to repopulate the comment field on failure just 100% loss of your effort!

    If this was a new bug that slipped in for a few days fine but this issue has been broken for years and we are tired of Microsoft ignoring it.

    A RESPECTABLE software company managing an IMPORTANT blog like this shouldn't be ignoring issues like this they should be all over the fix the second they heard about it.

    Microsofts reputation is getting killed by silliness like this.

  47. @Neville says:

    "that should have been put out to pasture over 4 years ago!"

    Its at least a 7 years old issue.

    wait let me tell you what I know:

    Microsoft is clouded by bureaucracy where one department is isolated from another and collaboration is the concept residing only in SharePoint (office) and VC teams.

    Having said that, this blog system is the product of Telligent corp, which is a separate company.. owned by an ex-Microsoft, someone awarded the project to them deliberately (or perhaps it was free of cost for publicity purposes).

    I reported this issue to Microsoft employees in my reach, Telligent customer service and by bitching in every related forum I encountered.. but the best I got was an forwarded email from Ted Johnson (MSFT) trying to escalate the issue with Telligent customer service, who ensure that they are looking into it. That was sometime in late 2011 or early 2012…

    So, if you know anyone at Microsoft, ask them to fix the timeout and form validation bug without making any sound. Nobody from MSFT reads these comments anyways, yet don't care much. If you send the email to Ted Johnson (via Email IEBlog editor link in right nav panel above), you will get a cold reply. Btw, this issue exist with *all* MSDN blogs (/b/interoprebility, /b/vcblog, /b/windowsstore etc.)

    "A RESPECTABLE software company managing an IMPORTANT blog like this shouldn't be ignoring issues like this they should be all over the fix the second they heard about it."

    Respect has nothing to do with it.. Btw, Office and Windows-blogs (blogs.windows.com) are using a different — yet tangible — versions of Telligent product… which doesn't allow you to post comments anonymously (exactly what happens on Apple, Google, IBM blogs).

  48. Sam says:

    Chris Wilson, Eric Lawrence and all respectable developers (past and present) at Microsoft want the company to fix its blogs!

    Please for the love of all things pure just add a REAL SUBMIT button, ASP Postbacks should be banned!

  49. @Edward says:

    It help keeping out the trolls who do not want to sign up and thus have their comment eaten regularly.

  50. I decided to take the plunge and actually sign in to post a comment…. and here it is.

    Please Microsoft – Can someone with the permission and skill to do so fix this blog once and for all?! It's been broken for ages and should have been fixed years ago. The fix shouldn't take more than 5 minutes to apply yet has held this blog back for longer than I can recall.

    In addition who is actually in charge of this blog? Knowing this would enable us to send the comments to the owner vs wasting time filling up the blog with comments about how frustrating the blog comment form is so we can focus on things like the IE10 textarea bug that affects all users in IE10 on both Windows 7 & 8.

  51. @Steve_web says:

    social.technet.microsoft.com/…/john%20m%20wood

    "Biography: I am the Project Manager for the MSDN & Technet Blogs platforms, as well as the TechNet Wiki."

Skip to main content