Re: Windows forgetting app passwords

2013-05-08 Thread mike smith
On Wed, May 8, 2013 at 10:59 AM, Corneliu I. Tusnea corne...@acorns.com.auwrote: Google said they do: http://www.google.com.au/policies/privacy/frameworks/ *As described in our Safe Harbor certificationhttp://safeharbor.export.gov/companyinfo.aspx?id=16626, we comply with the US-EU Safe

Re: Windows forgetting app passwords

2013-05-07 Thread David Connors
On Wed, May 8, 2013 at 9:13 AM, Corneliu I. Tusnea corne...@acorns.com.auwrote: Drop Box: *You own your data*: *By using our Services you provide us with information, files, and folders that you submit to Dropbox (together, “your stuff”). **You retain full ownership to your stuff. We don’t

Re: Windows forgetting app passwords

2013-05-07 Thread Greg Keogh
Google Drive: *They own your data*: This is really scary. Was someone talking about this a couple of months ago and pointed out that Microsoft SkyDrive has a similar policy? Is this a violation of International Safe Harbor Privacy Principles: US and EU rules about protection of personal data?

Re: Windows forgetting app passwords

2013-05-07 Thread Corneliu I. Tusnea
Google said they do: http://www.google.com.au/policies/privacy/frameworks/ *As described in our Safe Harbor certificationhttp://safeharbor.export.gov/companyinfo.aspx?id=16626, we comply with the US-EU Safe Harbor Framework and the US-Swiss Safe Harbor Framework as set forth by the US Department

Re: Windows forgetting app passwords

2013-05-06 Thread mike smith
environment? David. ** ** Thomas ** ** *From:* ozdotnet-boun...@ozdotnet.com [mailto: ozdotnet-boun...@ozdotnet.com] *On Behalf Of *David Connors *Sent:* Monday, 6 May 2013 7:08 AM *To:* ozDotNet *Subject:* Windows forgetting app passwords ** ** Howdy

Re: Windows forgetting app passwords

2013-05-06 Thread David Connors
On Mon, May 6, 2013 at 7:06 PM, mike smith meski...@gmail.com wrote: It'd be storing the hashed user/pw that gets sent off for authentication, or it should. Then when you change your pw on the domain, the hash no longer works. Insecure if anyone else touches your computer, and you can't

Re: Windows forgetting app passwords

2013-05-06 Thread mike smith
On Mon, May 6, 2013 at 7:08 PM, David Connors da...@connors.com wrote: On Mon, May 6, 2013 at 7:06 PM, mike smith meski...@gmail.com wrote: It'd be storing the hashed user/pw that gets sent off for authentication, or it should. Then when you change your pw on the domain, the hash no longer

RE: Windows forgetting app passwords

2013-05-06 Thread David Kean
DPAPI is supposed to handle password changes and resets: http://support.microsoft.com/kb/309408#7. From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On Behalf Of mike smith Sent: Monday, May 6, 2013 2:53 AM To: ozDotNet Subject: Re: Windows forgetting app passwords

RE: Windows forgetting app passwords

2013-05-06 Thread David Kean
And by that, I mean it sounds like it gets notifications from AD, not just from the local machine. From: David Kean Sent: Monday, May 6, 2013 10:06 AM To: ozDotNet Subject: RE: Windows forgetting app passwords DPAPI is supposed to handle password changes and resets: http

Re: Windows forgetting app passwords

2013-05-06 Thread David Connors
:* RE: Windows forgetting app passwords ** ** DPAPI is supposed to handle password changes and resets: http://support.microsoft.com/kb/309408#7. ** ** *From:* ozdotnet-boun...@ozdotnet.com [ mailto:ozdotnet-boun...@ozdotnet.com ozdotnet-boun...@ozdotnet.com] *On Behalf Of *mike

Re: Windows forgetting app passwords

2013-05-06 Thread David Connors
On Mon, May 6, 2013 at 7:53 PM, mike smith meski...@gmail.com wrote: I really wouldn't want something like DPAPI to be able to work across multiple machines. The idea is what is the fail. Hooking a pw change? YUK! That is precisely how it works. Problem is it doesn't appear to very well

RE: Windows forgetting app passwords

2013-05-06 Thread Ken Schaefer
connectivity to your DCs before you do a password change. Cheers Ken From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On Behalf Of David Connors Sent: Tuesday, 7 May 2013 7:32 AM To: ozDotNet Subject: Re: Windows forgetting app passwords On Mon, May 6, 2013 at 7:53 PM, mike

RE: Windows forgetting app passwords

2013-05-06 Thread Ken Schaefer
to lock/unlock your computer), then everything’s OK. Cheers Ken From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On Behalf Of David Connors Sent: Tuesday, 7 May 2013 10:30 AM To: ozDotNet Subject: Re: Windows forgetting app passwords On Tue, May 7, 2013 at 10:26 AM, Ken

Re: Windows forgetting app passwords

2013-05-06 Thread David Connors
On Tue, May 7, 2013 at 10:47 AM, Ken Schaefer k...@adopenstatic.com wrote: If you change your password after you have connected your VPN (i.e. your password hasn’t expired yet) –or- you have domain connectivity already (pre-user auth VPN), or there’s a server-side password reset (e.g. via OWA

RE: Windows forgetting app passwords

2013-05-06 Thread Ken Schaefer
) screams security issues. Cheers Ken From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On Behalf Of David Connors Sent: Tuesday, 7 May 2013 11:36 AM To: ozDotNet Subject: Re: Windows forgetting app passwords On Tue, May 7, 2013 at 10:47 AM, Ken Schaefer k

Re: Windows forgetting app passwords

2013-05-06 Thread David Connors
On Tue, May 7, 2013 at 12:32 PM, Ken Schaefer k...@adopenstatic.com wrote: I change my expired password when I VPN in and I cache my Google Drive passwords using the Windows credential manager is just 1 of large number of possibilities. At least where I’ve worked, no one uses the Windows

RE: Windows forgetting app passwords

2013-05-06 Thread Ken Schaefer
From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On Behalf Of David Connors Sent: Tuesday, 7 May 2013 12:45 PM To: ozDotNet Subject: Re: Windows forgetting app passwords On Tue, May 7, 2013 at 12:32 PM, Ken Schaefer k...@adopenstatic.commailto:k...@adopenstatic.com

Windows forgetting app passwords

2013-05-05 Thread David Connors
Howdy, Nothing to do with .NET but I thought I would throw this out there and see if anyone has any ideas. I have a number of apps that have their own password stored in them (Lync, GTalk, etc) that I set to auto-sign-on when I log into my work PC. Whenever my domain password expires, all of

RE: Windows forgetting app passwords

2013-05-05 Thread Williams, Thomas
Does your work have a web proxy? Thomas From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On Behalf Of David Connors Sent: Monday, 6 May 2013 7:08 AM To: ozDotNet Subject: Windows forgetting app passwords Howdy, Nothing to do with .NET but I thought I would throw

Re: Windows forgetting app passwords

2013-05-05 Thread David Connors
** ** *From:* ozdotnet-boun...@ozdotnet.com [mailto: ozdotnet-boun...@ozdotnet.com] *On Behalf Of *David Connors *Sent:* Monday, 6 May 2013 7:08 AM *To:* ozDotNet *Subject:* Windows forgetting app passwords ** ** Howdy, ** ** Nothing to do with .NET but I thought I would throw

Re: Windows forgetting app passwords

2013-05-05 Thread David Connors
On Mon, May 6, 2013 at 9:12 AM, David Connors da...@connors.com wrote: It is like the crypto API stores app passwords encrypted with your logon password ... but I can't imagine Windows would be that retarded. Turns out it is: http://blogs.msdn.com/b/shawnfa/archive/2004/05/05/126825.aspx

Re: Windows forgetting app passwords

2013-05-05 Thread Greg Keogh
Just as an aside ... that article announces the upcoming arrival of the ProtectedDatahttp://msdn.microsoft.com/en-us/library/system.security.cryptography.protecteddata(v=vs.100).aspxclass in 'Whidbey' (remember that?) which makes scrambling with the user or machine key trivially easy. I forgot

Re: Windows forgetting app passwords

2013-05-05 Thread David Connors
On Mon, May 6, 2013 at 9:45 AM, David Connors da...@connors.com wrote: On Mon, May 6, 2013 at 9:12 AM, David Connors da...@connors.com wrote: It is like the crypto API stores app passwords encrypted with your logon password ... but I can't imagine Windows would be that retarded. Turns out