Results 1 to 11 of 11

Thread: Since this is .NET forum I post it here.

  1. May 10th, 2003, 03:23 PM #1
    Lunatic3
    Lunatic3 is offline

    Thread Starter
    Frenzied Member
    Join Date
    Oct 2002
    Location
    Gammapolis
    Posts
    1,474

    Since this is .NET forum I post it here.

    A serious flaw in .NET Passport Accounts is fixed just a few hours ago:
    Read here:http://www.neworder.box.sk/explread.php?newsid=7951
    'Heading for the automatic overload'
    Marillion, Brave, The Great Escape, 1994

    'How will WE stand the FIRE TOMORROW?'
    Eloy, Silent Cries and Mighty Echoes, The Vision - Burning, 1979
    Reply With Quote Reply With Quote
  2. May 12th, 2003, 08:32 AM #2
    Cander
    Cander is offline
    Banished Cander's Avatar
    Join Date
    Dec 2000
    Location
    Why do you care?
    Posts
    6,913
    The .NET is misleading here. Passport really has nothing to do with .NET
    Stack Overflow
    See the features of Visual Studio 2010 and C# 4.0: The 10-4 show on Channel9
    Reply With Quote Reply With Quote
  3. May 12th, 2003, 10:43 AM #3
    Lunatic3
    Lunatic3 is offline

    Thread Starter
    Frenzied Member
    Join Date
    Oct 2002
    Location
    Gammapolis
    Posts
    1,474
    It seems so, but you can integrate it in your ASP.NET web based programs. However the point is they way MS deals with this kind of serious problems, that sometimes is ignoring and patching silently.
    'Heading for the automatic overload'
    Marillion, Brave, The Great Escape, 1994

    'How will WE stand the FIRE TOMORROW?'
    Eloy, Silent Cries and Mighty Echoes, The Vision - Burning, 1979
    Reply With Quote Reply With Quote
  4. May 12th, 2003, 10:45 AM #4
    Cander
    Cander is offline
    Banished Cander's Avatar
    Join Date
    Dec 2000
    Location
    Why do you care?
    Posts
    6,913
    My only problem with the headline, is that it got every little anti-MS/ anti-.NET/ pro-Java troll, screaming how .NET is broken, crappy, and vulnerable!



    Man If i had a gun...
    Stack Overflow
    See the features of Visual Studio 2010 and C# 4.0: The 10-4 show on Channel9
    Reply With Quote Reply With Quote
  6. May 12th, 2003, 11:04 AM #5
    Lunatic3
    Lunatic3 is offline

    Thread Starter
    Frenzied Member
    Join Date
    Oct 2002
    Location
    Gammapolis
    Posts
    1,474
    Imagine you are the boss in an enterprise company and have paid $34500 for a 3 years contract for .NET Passport, then some little kid breaks down your systems with that flaw, then Man, if only you had a gun
    'Heading for the automatic overload'
    Marillion, Brave, The Great Escape, 1994

    'How will WE stand the FIRE TOMORROW?'
    Eloy, Silent Cries and Mighty Echoes, The Vision - Burning, 1979
    Reply With Quote Reply With Quote
  7. May 12th, 2003, 11:28 AM #6
    Cander
    Cander is offline
    Banished Cander's Avatar
    Join Date
    Dec 2000
    Location
    Why do you care?
    Posts
    6,913
    Man I wouldnt use Passport/ nor Liberty for that matter.

    The year before last at VSLive, a MS developer asked who here plans on using Passport. Only 1 hand raised. He even mad a gag sound when he asked! In general , I beleive 99% of developers, even some developers at Microsoft could give a rats ass.

    Stack Overflow
    See the features of Visual Studio 2010 and C# 4.0: The 10-4 show on Channel9
    Reply With Quote Reply With Quote
  8. May 12th, 2003, 01:16 PM #7
    hellswraith
    hellswraith is offline
    PowerPoster hellswraith's Avatar
    Join Date
    Jul 2002
    Location
    Washington St.
    Posts
    2,464
    I heard the same thing from the guys at the VS.Net launch.

    To me, it is worthless. One password to do many things is totally insecure in my book. You should have many passwords to do many things. The Passport thing is great in theory, but there will always be holes that can be exploited. The more people using a service like Passport, the more people will try to break it. Look at MS Windows now. It only has so many vulerbilities because almost everyone is using it, and since that is the case, almost all hackers are trying to break into it. Nothing will be 100 percent secure.

    You have a much better chance at keeping things safe if you have seperate logons to each place you require one. This at least helps that if one place gets broken into, then just that one place is affected, the rest is safe.
    My Site
    Reply With Quote Reply With Quote
  9. May 12th, 2003, 01:27 PM #8
    Pirate
    Pirate is offline
    Sleep mode
    Join Date
    Aug 2002
    Location
    RUH
    Posts
    8,083
    moreover ,if I'm not wrong , these passports are very expensive .
    Reply With Quote Reply With Quote
  11. May 12th, 2003, 03:44 PM #9
    nemaroller
    nemaroller is offline
    I wonder how many charact
    Join Date
    Feb 2001
    Location
    Savage, MN, USA
    Posts
    3,704
    About the only thing I ever used PassPort for is to sign into the MSN gaming community (because its requireD)....

    But as was mentioned above, I don't think anyone can realistically create a store once and be secure password. Murphy's law demands it will fail... so why would anyone put all their eggs in one basket?
    Reply With Quote Reply With Quote
  12. May 13th, 2003, 05:45 PM #10
    PT Exorcist
    PT Exorcist is offline
    yay gay PT Exorcist's Avatar
    Join Date
    Apr 2002
    Location
    . . . my reason of shame
    Posts
    2,729
    well like the last guy said(sorry im too lazy to look at the nick at this hours of the night) i only have msn for playing in zone.com becasue it is required altogh it raised a lot of other problems..it simply sucks...........
    \m/\m/
    Reply With Quote Reply With Quote
  13. May 13th, 2003, 08:48 PM #11
    Slow_Learner
    Slow_Learner is offline
    Fanatic Member
    Join Date
    Sep 2002
    Posts
    518
    I was a system admin for a long time, and one of the things that stuck with me was putting all your user security in one place - one PUBLIC place with a big fat red target circle on it - is just plain nuts. Anybody who hops on that bandwagon kind of deserves to get burned, maybe someday the admin market will turn around and stop being low-bid like it is now.
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules


Click Here to Expand Forum to Full Width