Live data from Hacker News

Microsoft Live Account Credentials Leaking from Windows 8 and Above

hackaday.com

61–70 of 144 posts

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#62
post #19
post #17

Earlier quoted context omitted.

You can actually have Windows logged in with a local account (normal old school account) and use the store with a different Live account. But yes, I am quite annoyed by them requiring that I use online credentials to log in to a physical computer. I prefer to separate the two authentication mechanisms.

That would be great - when I most recently tried to use it I was told by the dialog box that entering my Live credentials would convert my local account to the Live account, and I'd need to log in with the Live password not the local one.

I remember that happening a while back and it definitely forced me to log in with my Live account credentials from then on. I was rather miffed, but didn't bother trying to do anything about it then.

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#63
post #40

Earlier quoted context omitted.

Local accounts were not available in Windows 8 or 8.1, they only got reintroduced in Windows 10. Call me old fashioned, but I prefer my login credentials to my physical PC to be different than for my online accounts.

That's false: https://support.microsoft.com/en-us/help/13951/windows-creat... (I had a Windows 8 VM for compiling some software and used a local account.)

OK, I stand corrected. I recall that I had to use a Live account for a preview version of Windows 8 I installed on a test machine. Maybe my memory is off, I hadn't used it in ages.

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#64
post #40

Earlier quoted context omitted.

I'm not sure who's correct in this particular thread, but sometimes they hide the "unfavoured" approach so well that they convince people to use the new method. In one case, I unsuccessfully tried to create just a local account in Win 8, because they had hidden it behind 3+ layers of "sign in here with your live account". I was sure that there must be a way to create a local one, but just couldn't find the right path…

Local accounts were not available in Windows 8 or 8.1, they only got reintroduced in Windows 10. Call me old fashioned, but I prefer my login credentials to my physical PC to be different than for my online accounts.

Scott Hanselman had a guide on how to actually create an offline account in Win 8 (see: [1]).

It involves navigating to a "Create a Microsoft Account" screen, and then clicking the well-hidden "Sign in without a Microsoft Account" at the bottom. Quite a well thought out dark pattern, confused me at the time.

[1] http://www.hanselman.com/blog/HowToSignIntoWindows8Or81Witho...

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#66

The articles recommends that you "strengthen your Microsoft Live account password", but if I understand the vulnerability it is only exposing the hash of your password? If it's only exposing the hash, why should you make your password stronger?

I've found strengthening my Live account password to be difficult. There is a 16-character limit that makes it impossible for me to use a good passphrase.

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#67

As a Linux user I have kept Windows 7 & 8 partitions in my laptop and workstation disks for years because there used to be time where you needed Windows in the work for some programs to work and some documents to open. Windows 10 upgrade push made me to realize that that time passed a long time ago. Last time I booted to Windows for other reason than playing a game was seven years ago. LibreOffice works well with MS…

> Windows has lost it's grip for good. For your listed use case of gaming & document creation. There are a lot of niche applications that are Windows only. All major CAD platforms, a decent chunk of FEA packages, hardware vendor software, etc. At the professional level, Windows still has quite the grip.

> All major CAD platforms

NX runs on Linux too.

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#69

As a Linux user I have kept Windows 7 & 8 partitions in my laptop and workstation disks for years because there used to be time where you needed Windows in the work for some programs to work and some documents to open. Windows 10 upgrade push made me to realize that that time passed a long time ago. Last time I booted to Windows for other reason than playing a game was seven years ago. LibreOffice works well with MS…

> Windows has lost it's grip for good. For your listed use case of gaming & document creation. There are a lot of niche applications that are Windows only. All major CAD platforms, a decent chunk of FEA packages, hardware vendor software, etc. At the professional level, Windows still has quite the grip.

Windows is still definitely dominant for gaming. There are definitely an increasing number of games being released on Linux, but the vast majority of "PC" games are still windows only.
Post reply on HN