whats the point of passwords if... - Printable Version
-Shoutbox (https://shoutbox.menthix.net)
+-- Forum: MsgHelp Archive (/forumdisplay.php?fid=58)
+--- Forum: Messenger Plus! for Live Messenger (/forumdisplay.php?fid=4)
+---- Forum: WLM Plus! Help (/forumdisplay.php?fid=12)
+----- Thread: whats the point of passwords if... (/showthread.php?tid=95072)
whats the point of passwords if... by a3440310 on 07-20-2010 at 08:36 PM
I protected my preferences with a password. However, other users can still change significant setting by running the configuration wizard.
Whats the point then of pass-protecting the messenger lock or chat records if any user on the pc can still change them?
Can I improve this security flaw? Any ideas?
RE: whats the point of passwords if... by djdannyp on 07-20-2010 at 08:38 PM
If you password protect your logs via Encryption, then nothing can change them.
The password you set for preferences applies to your preferences only. If someone else signs into Windows Live Messenger then they can change their own preferences to suit themselves
RE: whats the point of passwords if... by a3440310 on 07-20-2010 at 08:57 PM
You misunderstand. I want to enable certain setting and protect them with a password. The users of the pc however will be able to disable some of these setting via the Wizard even though they do now know the password.
I want to prevent that.
RE: whats the point of passwords if... by prashker on 07-20-2010 at 09:04 PM
What he means is
![[Image: pass_61720.png]](http://sonicsam.net/files/dump/pass_61720.png)
Is irrelevant when someone runs the Configuration Wizard.
I'd actually think that this is a bug a3440310 
.
RE: whats the point of passwords if... by a3440310 on 07-20-2010 at 09:15 PM
SonicSam is right, thats what I mean.
So what can I do to have this bug solved?
RE: whats the point of passwords if... by prashker on 07-20-2010 at 09:25 PM
Went through the liberty of creating the topic in the Bug Reports forum for you 
RE: whats the point of passwords if... by djdannyp on 07-20-2010 at 09:25 PM
Yeah, I get what he means, but surely these are per user settings? So his own preferences are protected aren't they? Or does he mean that if someone runs the wizard on HIS account then it doesn't ask for the password before changing settings?
RE: whats the point of passwords if... by prashker on 07-20-2010 at 09:27 PM
quote:If you try and access your own preferences it asks for a password.
Originally posted by djdannyp
Yeah, I get what he means, but surely these are per user settings? So his own preferences are protected aren't they? Or does he mean that if someone runs the wizard on HIS account then it doesn't ask for the password before changing settings?
Why shouldn't it do the same for the Configuration Wizard?
The point he's trying to make is there are some inconsistencies.
![[Image: pass_45798.png]](http://sonicsam.net/files/dump/pass_45798.png)
RE: whats the point of passwords if... by a3440310 on 07-21-2010 at 05:17 AM
Thanks for reporting the bug for me. I will try and find out where I can follow the progress of the bugfixing by the makers of Plus.
RE: whats the point of passwords if... by CookieRevised on 07-22-2010 at 09:54 AM
This is not a bug I think, but simply something which wasn't programmed in. Nevertheless, it is indeed a bit strange that
1) It wasn't thought of
2) It was never 'discovered' before
PS: Note that you can not completely protect your settings though. It is relativly easily to disable the preferences password, and you would also always be able to alter the preferences directly via the registry. The preferences password is just for very basic 'protection'.
quote:You can't realy 'follow' it.
Originally posted by a3440310
Thanks for reporting the bug for me. I will try and find out where I can follow the progress of the bugfixing by the makers of Plus.
Simply check from time to time if Patchou or Nathalie post in that bug-thread (you can subsribe to it) and make sure you always have the latest version of Messenger Plus! Live installed.
But note that this issue requires some (small) UI-changes. Also, they are mainly focussing on Messenger Plus! Live 5. And it will still be a while before it will be released to the public. I can imagine that this issue is also not top-priority at all (because of the weak protection scheme - you could always bypass it anyways), so don't expect it to be added soon.
RE: whats the point of passwords if... by a3440310 on 07-22-2010 at 03:15 PM
Thats quite okay with me. I am aware its a rather weak protection but thats good enough for me.
Its good to see that a free program actually has an active community around it. Don't see that so often. Thanks for the quick and professional response to my initial report of this "bug".