Shoutbox

When MSNmessenger is running,the chat log password can be changed from "Configure Guide"(I use the Simple Chinese version,so ,may be the name of the "Configure Guide" is not the corresponding one in English version,but I think you can understand what I said.) using "Set Password" but the old password is not required.
On my opinion,every option that required password should not be changed if the old password is not correctly input.So,is it a big bug?

quote:

---

Originally posted by lonelicloud
On my opinion,every option that required password should not be changed if the old password is not correctly input.So,is it a big bug?

---

so what you're saying is that: when you set a password to for your chat logs, you should always be asked to put in your old password, before you change it to a new one?




and yeah... that would make sense . i never noticed that before. i thought it would ask me (to confirm the old password) after signing out and than in again, but it doesn't. it would kind of suck if somebody went on my msn and set some random password to my logs.

wasn't the (confirm old password) feature in the old versions of plus? O_o

quote:

---

Originally posted by Joa
wasn't the (confirm old password) feature in the old versions of plus? O_o

---

Yes, it was.
But Patchou removed that for some reason.
I can't remember exactly why, but I think I remember many people complained about the password was randomly changed without the consent of the user.

quote:

---

Originally posted by http://www.msgplus.net/changelog.php?1

2.21.54 Version - 06/09/2003

• Some people are experiencing problems with their encryption password (Messenger Plus! refuses a valid password). The reason of this problem has yet to be found, however, if you get the bug with this new version, you'll have a workaround: go in the Preferences, click the "Change" button and reenter your password (same one or a different, your choice). This will reset Messenger Plus! internal settings so that you can continue to use your password as if nothing happened.
  
  • o The "Old Password" field has been removed. Instead, the "Change" button is disabled when you're not signed in.

---

The"Old Password" box was removed because people who forgot their old password wanted to be able to change it. Tehe reason why it was done is simply because if you don't enter your old password when prompted for re-encryption of your logs, then they won't be re-encrypted and only newly generated logs will use the new password. This mean that there is no security issue related to this .

Thank you,Patchou!
Your method is very great.I see it now.
It's very convenient and secure.