Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Microsoft Live Account Credentials Leaking from Windows 8 and Above

hackaday.com

Post reply on HN
Print view View original

121–130 of 144 posts

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#121

Post by lucb1e »

winthrowe wrote: post #93
lucb1e wrote: post #16

Earlier quoted context omitted.

> It's not really a surprise if an app store needs an account. Are there any that don't? Yeah the ones that have existed since forever: GNU/Linux repositories (Ubuntu's, Debian's, etc.). Even Ubuntu's Software Center, which you might find closer to an app store than a command line interface even though it's the same thing, does not require an account until you try to leave comments or review an application. Then ther…

If you don't have to pay and therefore authenticate, it's not really a store, but only a software repository.

How many people don't even have payment info in their Google or Microsoft account? They can't pay anyway and payment info is not required so clearly that's not it.

I'd just like to download apk files from the play store, but that's not possible without an account even though there's no reason for it whatsoever. Moreover, I'd like to contribute to many apps while still not attaching payment info to my account. Currently I bought some pro versions of apps via gift cards, but this doesn't work for subscriptions (even if you have 100 bucks prepaid on your account and the subscription is 1 buck a month, and don't get me started on country locking the credit). They all want to have your data and lock you in.

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#122

Post by hudell »

touristtam wrote: post #78
hudell wrote: post #72

Earlier quoted context omitted.

A couple months ago I tried to ditch windows for linux at work and I failed, mostly because neither Skype nor Hangouts worked properly on it and the client was tired of switching tools, but other than that I think I didn't miss anything. At home linux is a complete no no, I run into windows only tools every week. But for a better experience on linux, I recommend changing libre office for wps office.

your anecdotal experience against mine: Hangout and Skype (and Vibe) are working fine on Ubuntu.

The problem with skype was that it only worked if everybody involved used old versions of it. Dozens of people had the same issue on the client's office, so they switched to hangouts which worked now and then. There's a new version of skype for linux now that seems to be working fine though.

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#123

Post by dagaci »

marcosdumay wrote: post #105
deviate_X wrote: post #37

Earlier quoted context omitted.

I'd be interested to know, how easy is it to actually break the hash of the password-code

Why would you need to? The hash is enough to give you access to any NTLM service.

What NTLM service would you be able to access for example?

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#124

Post by Gracana »

SmellyGeekBoy wrote: post #86
tclover wrote: post #24

Earlier quoted context omitted.

Using windows 10 since it came out, never opened Windows Store, not even once.

My experience of the Windows Store is of the fake knock-offs and similarly named apps that pop up as results in my start menu when I press "Start" and start typing the name of something I already have installed. They always seem to pop up for a couple of seconds before the actual application I'm searching for shows up. As a result I've come to the conclusion that I can't trust anything in the store itself and have ne…

You can disable those search results. I'm not on a Windows 10 computer right now so I can't tell you where to look, but I found the settings fairly easily once it gave up trying to search the internet for a "settings" program. Do that and the search function will suck a lot less.

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#125

Post by marcosdumay »

dagaci wrote: post #123
marcosdumay wrote: post #105

Earlier quoted context omitted.

Why would you need to? The hash is enough to give you access to any NTLM service.

What NTLM service would you be able to access for example?

Wait, what?

NTLM is a generic authentication layer. You use it to get single sign-on for your web APIs.

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#126

Post by ljk »

Nokinside wrote: post #42

As a Linux user I have kept Windows 7 & 8 partitions in my laptop and workstation disks for years because there used to be time where you needed Windows in the work for some programs to work and some documents to open. Windows 10 upgrade push made me to realize that that time passed a long time ago. Last time I booted to Windows for other reason than playing a game was seven years ago. LibreOffice works well with MS…

totally agree, just one small thing:

> Windows has lost it's grip for good.

its* grip

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#127

Post by dragonsky67 »

oolongCat wrote: post #104
bsilvereagle wrote: post #53

Earlier quoted context omitted.

> Windows has lost it's grip for good. For your listed use case of gaming & document creation. There are a lot of niche applications that are Windows only. All major CAD platforms, a decent chunk of FEA packages, hardware vendor software, etc. At the professional level, Windows still has quite the grip.

The biggest reason why windows still has that grip vs linux is hardware based. Try installing Ubuntu on a brand new laptop. Its just not something a non technical user can deal with. I am sure a good share of us here on HN has, at-least one relative who calls us because the "internet is broken" imagine them trying to deal with something like ubuntu on a brand new computer. I like to think this is partially our fault…

I've got a reasonable number of relatives who would not be able to install windows or MacOS on a new computer, they just purchase new computers.

In my experience installing a friendly linux like Ubuntu is a lot more simple than installing Windows. Unless the hardware is very new the install will just work. If you want to play games you may have to play around with installing the latest video drivers from the vendor, but how is this any different from what you have to do on a Windows machine?

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#128

Post by scholia »

lucb1e wrote: post #121
winthrowe wrote: post #93

Earlier quoted context omitted.

If you don't have to pay and therefore authenticate, it's not really a store, but only a software repository.

How many people don't even have payment info in their Google or Microsoft account? They can't pay anyway and payment info is not required so clearly that's not it. I'd just like to download apk files from the play store, but that's not possible without an account even though there's no reason for it whatsoever. Moreover, I'd like to contribute to many apps while still not attaching payment info to my account. Current…

I think all the major ecosystems require a log-in: Apple, Amazon, Google, Microsoft.

In Windows 10's case, it's only for apps. If you're happy with Win32 programs, you still don't need to use a Microsoft Account.

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#129

Post by scholia »

jhasse wrote: post #60
zokier wrote: post #55

Earlier quoted context omitted.

I think the definition of "store" generally implies the ability to buy things, which neither F-Droid or package managers enable.

You're right, I didn't think of that. Isn't it possible to buy something in the Windows Store and login just for this one purchase? Note sure though, but I think I remember doing that with Windows 8.

Yes, you can. Just make sure you never use two different log ins from the same account on your PC ;-)

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#130

Post by qu4z-2 »

ctrl-j wrote: post #107
Sylos wrote: post #95

Earlier quoted context omitted.

I wouldn't say, it's a solid alternative for everyone, but for some people, it can definitely be. I for example like indie games. As a result, and probably with a bit of luck, 80% of my Steam-library had Linux-support when I jumped into Linux. And, for a game from 2006, you'll probably have to pray to the Windows-compatibility-mode gods at this point, too. I actually wouldn't be surprised, if it worked better under W…

> And, for a game from 2006, you'll probably have to pray to the Windows-compatibility-mode gods at this point, too. I actually wouldn't be surprised, if it worked better under WINE... That's just not true. I've got plenty of games from 2006 and earlier than run just as good as they originally did. Sure Oblivion crashes, but it did in 2006. Half-Life 2 runs pretty darn well. Company of heroes? Yep. Dawn of War and th…

For what it's worth, I find a lot of older games I try to run on Win 10 crash, or don't work 100%. KOTOR, for instance. So while I can get a lot to work more or less flawlessly, that's more-or-less a tie with wine.
Post reply on HN