Live data from Hacker News

Microsoft Live Account Credentials Leaking from Windows 8 and Above

hackaday.com

91–100 of 144 posts

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#91
post #67

Earlier quoted context omitted.

> All major CAD platforms NX runs on Linux too.

https://en.wikipedia.org/wiki/Comparison_of_computer-aided_d... Many run on Mac & Linux. Hell, AutoCAD runs on iOS & Android.

I don't think any others on that list really qualify as "major". And AutoCAD 360 (=the mobile version) is very much not the same as AutoCAD proper.

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#92
post #75
post #71

Huh, their evile 31337 haxx0r background looks like a blatant copyright violation. It's artwork based on a video game cover. Previously also "stolen" by the BBC: http://www.gamesradar.com/wait-did-bbc-use-thief-art-illustr... (since then apparently replaced, http://www.bbc.com/news/technology-33442419 ) Also available for illegitimate at http://www.shutterstock.com/pic-389962378/stock-photo-hacker... or http://www.sh…

It's barely even visible...

I meant on https://msleak.perfect-privacy.com/

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#93
post #16
post #10

Earlier quoted context omitted.

But if you upgrade to Windows 10 from Windows 7, your existing log-on (which has no Live account connection) continues exactly as before.... It's not really a surprise if an app store needs an account. Are there any that don't?

> It's not really a surprise if an app store needs an account. Are there any that don't? Yeah the ones that have existed since forever: GNU/Linux repositories (Ubuntu's, Debian's, etc.). Even Ubuntu's Software Center, which you might find closer to an app store than a command line interface even though it's the same thing, does not require an account until you try to leave comments or review an application. Then ther…

If you don't have to pay and therefore authenticate, it's not really a store, but only a software repository.

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#94

As a Linux user I have kept Windows 7 & 8 partitions in my laptop and workstation disks for years because there used to be time where you needed Windows in the work for some programs to work and some documents to open. Windows 10 upgrade push made me to realize that that time passed a long time ago. Last time I booted to Windows for other reason than playing a game was seven years ago. LibreOffice works well with MS…

> Windows has lost it's grip for good. For your listed use case of gaming & document creation. There are a lot of niche applications that are Windows only. All major CAD platforms, a decent chunk of FEA packages, hardware vendor software, etc. At the professional level, Windows still has quite the grip.

I agree to an extent... but I have seen a massive push to Mac's at the two largest companies I've worked at. Literally, all new employees get Mac's as opposed to Windows, which was not the case five years ago. Both are fortune 500 companies, so they have a large number of employees.

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#95
post #81

Earlier quoted context omitted.

> Windows has lost it's grip for good. For your listed use case of gaming & document creation. There are a lot of niche applications that are Windows only. All major CAD platforms, a decent chunk of FEA packages, hardware vendor software, etc. At the professional level, Windows still has quite the grip.

I think even the idea that Linux is a solid alternative to Windows for gaming is still a joke. It's immeasurably better than it was even just 5 years ago, but outside of Valve, indie devs or smaller studios, we're not seeing a lot of linux ports. And when we do they seem clunkier, somehow. And sometimes I just want to pop into some obscure resource management game from 2006 without sacrificing a goat and praying to W…

I wouldn't say, it's a solid alternative for everyone, but for some people, it can definitely be. I for example like indie games. As a result, and probably with a bit of luck, 80% of my Steam-library had Linux-support when I jumped into Linux.

And, for a game from 2006, you'll probably have to pray to the Windows-compatibility-mode gods at this point, too. I actually wouldn't be surprised, if it worked better under WINE...

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#96

The articles recommends that you "strengthen your Microsoft Live account password", but if I understand the vulnerability it is only exposing the hash of your password? If it's only exposing the hash, why should you make your password stronger?

There are databases of hashes to common passwords that makes it easy to find the password from hash. If you use weak passwords like "password123", hashing it is not going to make it secure (unless it is salted). And so the general advice is use strong passwords no matter what.

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#97
post #89

Earlier quoted context omitted.

Yeah, it's the only reason I have a Windows laptop (or desktop) - I teach music technology, and that means a DAW which works - in my case Cubase - so unless Steinberg changes their mind on supporting Linux (which seems massively unlikely given the amount of effort needed to get it working properly), I'll have to have a Windows machine for the foreseeable future; everything else I do is done on my Chromebooks (one Chr…

In case you haven't heard about it: Bitwig Studio works effortless on Linux with a great feature set. The workflow is more similar to Ableton Live than Cubase though.

I've heard about it, but there are a number of problems - firstly, as you've said, it's more Ableton than Cubase, and I've spent a fair bit of time trying to get on with Ableton (I regularly work with a producer who uses it), but alas, having spent 20 years+ using Cubase, it's difficult for my addled brain to make the shift in paradigm, and things which are just "natural" now in Cubase involve a lot of thinking to remember how to do in Ableton.

Secondly, plugins - there are a heap of free and paid plugins that are Windows-only that I'm not sure will work in Linux (I know about being able to bridge them, but even 32/64 Windows bridges have issues!) - having said that I've not tried this lately, so hopefully there's been some good progress.

Third, and probably most intractably - it's a big enough ask to get school IT departments to support 'odd' software like Cubase; getting them to support Linux, alas, would be infinitely unlikely, so I'd still need a Windows PC to support my teaching work (which is my main income).

Thanks for the tip, though, I shall re-look into Bitwig again as it's on Linux, and then my GalliumOS Chromebook could become even more useful!

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#98

Until a fix is released, this can be mitigated by blocking outbound TCP connections on ports 139 and 445. Individual users can do this using by setting up suitable outbound rules in the Windows Firewall with Advanced Security snap-in (wf.msc).

Or by using a browser that doesn't silently and promiscuously attempt to connect to remote network shares. Like, any other browser. Good grief.

Or both. Defense in depth.

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#99
post #24
post #9

And people wonder why some of us haven't upgraded from Windows 7. Win10 tries really hard to make you log into your desktop with your Live Account credentials - you can't use the store without this. Whereas if it were just leaking a local login it would be much less critical.

Using windows 10 since it came out, never opened Windows Store, not even once.

I've poked around in there. Think of live tiles as the latest version of desktop gadgets. I installed the weather channel free app, I now see local weather when I hit start.

Re: Microsoft Live Account Credentials Leaking from Windows 8 and Above

#100

As a Linux user I have kept Windows 7 & 8 partitions in my laptop and workstation disks for years because there used to be time where you needed Windows in the work for some programs to work and some documents to open. Windows 10 upgrade push made me to realize that that time passed a long time ago. Last time I booted to Windows for other reason than playing a game was seven years ago. LibreOffice works well with MS…

> Windows has lost it's grip for good. For your listed use case of gaming & document creation. There are a lot of niche applications that are Windows only. All major CAD platforms, a decent chunk of FEA packages, hardware vendor software, etc. At the professional level, Windows still has quite the grip.

At the consumer level, it makes little difference now that most things are interoperable. It's only at the enterprise where lots of enterprise grade software are still NT-only and its likely to remain that way for a while as most of those shops don't have enough in-house expertise to support multiple platforms simultaneously.
Post reply on HN