MilikMilik

Windows 11 Still Runs on 30‑Year‑Old Code—Why That Matters for Security and Speed

Windows 11 Still Runs on 30‑Year‑Old Code—Why That Matters for Security and Speed

Win32: The 1990s Foundation Microsoft Never Expected to Keep

When Microsoft Azure CTO Mark Russinovich publicly acknowledged that Windows 11 still relies heavily on Win32 code designed in the Windows 95 era, it confirmed what many developers suspected but even Microsoft’s own leaders hadn’t fully anticipated. Russinovich joked that people in the 1990s expected “flying cars and moon stations,” not an API surface from that era remaining first‑class today. Yet Win32 persists because millions of applications—especially enterprise software and professional desktop tools—still depend on its deep system access. For decades, Microsoft tried to replace it with newer frameworks like WPF, Silverlight, WinRT, and the Universal Windows Platform, but each push fizzled. Developers watched those platforms get deprioritized or abandoned, eroding trust and making native Windows development feel risky. The result is a modern Windows 11 whose core still rests on architectural decisions made nearly thirty years ago.

Legacy Code, Modern Risks: Security and Performance Implications

The continued dominance of Win32 raises real questions about Win32 API security and performance in a modern threat landscape. Older, monolithic APIs were designed long before today’s focus on sandboxing, least‑privilege access, and hardware‑backed isolation. By design, Win32 gives applications broad access to the system, which is one reason it remains so attractive to enterprise developers—but also a tempting target for attackers. At the same time, Microsoft’s experiments with newer frameworks and web wrappers, such as Chromium‑based apps for Teams, Clipchamp, Outlook, OneDrive, and the Windows Widgets board, introduced their own performance costs. Heavy RAM usage and sluggish responsiveness fed the perception that Windows 11 had become bloated. Microsoft’s challenge is to harden this legacy surface without breaking compatibility, while also reducing the overhead from layers of newer technologies that sit on top of already complex OS architecture.

Why Microsoft Can’t Simply Kill Win32

If Win32 introduces risk, why not just retire it? The answer is compatibility. Backward compatibility has become the single biggest reason Win32 remains indispensable. Businesses depend on decades‑old line‑of‑business applications that would be expensive or impractical to rewrite. Developers also value the unrestricted, low‑level access Win32 offers, which newer, sandboxed frameworks like UWP and WinRT deliberately constrain. Microsoft’s repeated attempts to push developers toward replacement technologies—and then stepping back from them—only made things worse. Each pivot, from Silverlight to UWP and then to web‑centric approaches via WebView2, convinced many developers that betting on new Windows‑only frameworks was risky. With so many mission‑critical apps still compiled against Win32, pulling the plug would break workflows across entire organizations. Instead of a clean break, Microsoft is now treating Win32 not as a temporary stopgap but as a permanent, supported foundation.

Windows Modernization: From Web Wrappers Back to Native UI

As web‑wrapped apps proliferated, users began to feel the cost: slower launch times, heavier memory usage, and inconsistent responsiveness. That backlash appears to have forced a strategic reset. Microsoft has scaled back aggressive Copilot integrations and is investing in Windows modernization at the OS architecture level. Partner Architect Rudy Huyn has been hiring for a team focused on building “100% native” Windows 11 apps. The Windows App SDK 2.0 and WinUI 3 are now central to this plan, giving developers a modern toolkit while staying close to the metal. A rewritten Run dialog using .NET AOT compilation now hits a median launch time of just 94 milliseconds, rivaling or beating older Win32 components. At the same time, Microsoft is experimenting with design changes like a smaller, resizable taskbar and a native Start menu built with WinUI, aiming to restore responsiveness without sacrificing features.

K2 and the Slow Surgery on Windows’ Core

Instead of a disruptive rewrite, Microsoft is modernizing Windows 11 piece by piece, with the internal “Windows K2” effort targeting core components. A key part of K2 is migrating crucial system experiences to WinUI 3 to make the native UI faster and leaner. Early benchmarks on File Explorer show how this incremental approach can pay off: moving from WinUI 2 to WinUI 3 cuts overall allocations by 41%, transient allocations by 63%, function calls by 45%, and time spent in WinUI code by 25%. These improvements, expected to ship to users after leaving development branches, suggest Microsoft can significantly boost speed without breaking compatibility. Meanwhile, Russinovich’s own Sysinternals tools—founded in 1996 and now integrated into Windows—illustrate how deeply entrenched some “temporary” components have become. For users, the message is clear: Windows 11’s future will be built by carefully refactoring its past, not erasing it.

Comments
Say Something...
No comments yet. Be the first to share your thoughts!