Shoutbox

I protected my preferences with a password. However, other users can still change significant setting by running the configuration wizard.

Whats the point then of pass-protecting the messenger lock or chat records if any user on the pc can still change them?

Can I improve this security flaw? Any ideas?

If you password protect your logs via Encryption, then nothing can change them.

The password you set for preferences applies to your preferences only.  If someone else signs into Windows Live Messenger then they can change their own preferences to suit themselves

You misunderstand. I want to enable certain setting and protect them with a password. The users of the pc however will be able to disable some of these setting via the Wizard even though they do now know the password.
I want to prevent that.

What he means is



Is irrelevant when someone runs the Configuration Wizard.

I'd actually think that this is a bug a3440310 .

SonicSam is right, thats what I mean.
So what can I do to have this bug solved?

Yeah, I get what he means, but surely these are per user settings?  So his own preferences are protected aren't they?  Or does he mean that if someone runs the wizard on HIS account then it doesn't ask for the password before changing settings?

quote:

---

Originally posted by djdannyp
Yeah, I get what he means, but surely these are per user settings?  So his own preferences are protected aren't they?  Or does he mean that if someone runs the wizard on HIS account then it doesn't ask for the password before changing settings?

---

If you try and access your own preferences it asks for a password.

Why shouldn't it do the same for the Configuration Wizard?

The point he's trying to make is there are some inconsistencies.

Thanks for reporting the bug for me. I will try and find out where I can follow the progress of the bugfixing by the makers of Plus.

This is not a bug I think, but simply something which wasn't programmed in. Nevertheless, it is indeed a bit strange that
1) It wasn't thought of
2) It was never 'discovered' before



PS: Note that you can not completely protect your settings though. It is relativly easily to disable the preferences password, and you would also always be able to alter the preferences directly via the registry. The preferences password is just for very basic 'protection'.

quote:

---

Originally posted by a3440310
Thanks for reporting the bug for me. I will try and find out where I can follow the progress of the bugfixing by the makers of Plus.

---

You can't realy 'follow' it.

Simply check from time to time if Patchou or Nathalie post in that bug-thread (you can subsribe to it) and make sure you always have the latest version of Messenger Plus! Live installed.

But note that this issue requires some (small) UI-changes. Also, they are mainly focussing on Messenger Plus! Live 5. And it will still be a while before it will be released to the public. I can imagine that this issue is also not top-priority at all (because of the weak protection scheme - you could always bypass it anyways), so don't expect it to be added soon.