Home All Groups Group Topic Archive Search About
Author
31 Jan 2006 3:09 AM
angelito tan
just wondering where does the password go after it's created ??? coz it
really make me confuse since i'm using xp .. what if u forgot ur
password, how can u get it ??

Author
31 Jan 2006 3:31 AM
DanS
"angelito tan" <diamond_shoe1***@yahoo.com> wrote in
news:1138676970.153024.100480@f14g2000cwb.googlegroups.com:

> just wondering where does the password go after it's created ??? coz it
> really make me confuse since i'm using xp .. what if u forgot ur
> password, how can u get it ??
>
>

Not the right group but, it's stored, encrypted, in a file on the HD. The
SAMS file if I'm not mistaken.

There is a built-in 'Administrator' account which is usually hidden on
the Welcome screen.

If this is a 'pre-configured' Dell or similar, the Administrator password
will most likely be blank. Otherwise, you are prompted to enter one upon
installion of XP.

In XP you can access the standard Windows login box instead of the
Welcome screen. To do this in XP Pro, at the Welcome screen you would do
2 ctrl-alt-del's. Then fill in Administrator.

For XP home: Must be done in safe mode. http://support.microsoft.com/?
kbid=290109

If it comes down to it, you could use a Windows password changing utility
that you can find in several different flavors of on the internet.

These would allow you to change the password of any account on the PC
without having to know the correct password. This even applies to the
built-in 'Administrator' account.

Two of the correct groups for these Windows XP questions are:

microsoft.public.windowsxp.general
microsoft.public.windowsxp.basics
Author
31 Jan 2006 3:48 AM
angelito tan
what do u mean 2 ctrl+alt+del not ctrl-alt-del ??? .. coz not i'm not
familiar in ctrl-alt-del .
Author
31 Jan 2006 3:56 AM
DanS
"angelito tan" <diamond_shoe1***@yahoo.com> wrote in
news:1138679332.887003.242880@g44g2000cwa.googlegroups.com:

> what do u mean 2 ctrl+alt+del not ctrl-alt-del ??? .. coz not i'm not
> familiar in ctrl-alt-del .
>

Then you haven't used any Windows prior to XP ?

Didn't you get one of these, the Microsoft Keyboard ? ...

http://users.adelphia.net/~thisnthat/mskeyboard.jpg
Author
31 Jan 2006 3:49 AM
angelito tan
Do u mean 2 ctrl+alt+del not ctrl-alt-del ??? .. coz not i'm not
familiar in ctrl-alt-del .
Author
31 Jan 2006 3:56 AM
DanS
"angelito tan" <diamond_shoe1***@yahoo.com> wrote in
news:1138679348.373941.266220@g43g2000cwa.googlegroups.com:

> Do u mean 2 ctrl+alt+del not ctrl-alt-del ??? .. coz not i'm not
> familiar in ctrl-alt-del .
>

Then you haven't used any Windows prior to XP ?

Didn't you get one of these, the Microsoft Keyboard? ...

http://users.adelphia.net/~thisnthat/mskeyboard.jpg
Author
31 Jan 2006 4:08 AM
angelito tan
ohh .. coz i often use the "+" plus sign which mean add than "-" sign
mean minus .. after u say i have to press two ctrl-alt-del , it came in
my mind and i read it as ctrl minus alt minus del .. coz i often see
and use this one ctrl + alt + del which mean for me ctrl add alt add
del .. ehehehheh ..
Author
31 Jan 2006 3:49 AM
angelito tan
Do u mean 2 ctrl+alt+del not ctrl-alt-del ??? .. coz not i'm not
familiar with ctrl-alt-del .
Author
31 Jan 2006 3:56 AM
DanS
"angelito tan" <diamond_shoe1***@yahoo.com> wrote in
news:1138679361.918169.239300@f14g2000cwb.googlegroups.com:

> Do u mean 2 ctrl+alt+del not ctrl-alt-del ??? .. coz not i'm not
> familiar with ctrl-alt-del .
>

Then you haven't used any Windows prior to XP ?

Didn't you get one of these, the Microsoft Keyboard? ...

http://users.adelphia.net/~thisnthat/mskeyboard.jpg
Author
31 Jan 2006 4:07 AM
angelito tan
ohh .. coz i often use the "+" plus sign which mean add than "-" sign
mean minus .. after u say i have to press two ctrl-alt-del , it came in
my mind and i read it as ctrl minus alt minus del .. coz i often see
and use this one ctrl + alt + del which mean for me ctrl add alt add
del .. ehehehheh ..
Author
31 Jan 2006 2:24 PM
Jeff Johnson [MVP: VB]
"DanS" <t.h.i.s.n.t.h.a.t@a.d.e.l.p.h.i.a..n.e.t> wrote in message
news:Xns975BE51B06EAAidispcom@216.196.97.142...
> "angelito tan" <diamond_shoe1***@yahoo.com> wrote in

> Not the right group but, it's stored, encrypted, in a file on the HD. The
> SAMS file if I'm not mistaken.

It's not stored at all. It is hashed and then the HASH is stored.
Author
31 Jan 2006 11:38 PM
DanS
Show quote Hide quote
"Jeff Johnson [MVP: VB]" <i.get@enough.spam> wrote in
news:#HGkSInJGHA.3904@TK2MSFTNGP10.phx.gbl:

>
> "DanS" <t.h.i.s.n.t.h.a.t@a.d.e.l.p.h.i.a..n.e.t> wrote in message
> news:Xns975BE51B06EAAidispcom@216.196.97.142...
>> "angelito tan" <diamond_shoe1***@yahoo.com> wrote in
>
>> Not the right group but, it's stored, encrypted, in a file on the HD.
>> The SAMS file if I'm not mistaken.
>
> It's not stored at all. It is hashed and then the HASH is stored.
>
>

Sorry...it's stored, hashed, in a file on the HD. The SAMS file if I'm not
mistaken.

(Hashing = one-way encryption)
Author
31 Jan 2006 3:44 AM
coal_brona
Hi,


I can say it is possible to reset your lost pass with Active@ Password
Changer utility. That is a really useful tool. It's small and perform
it's operation quickly. I've used it before and it helped me, I suppose
you pay attention to this one piece of soft.

http://www.password-changer.com/
Author
31 Jan 2006 11:02 AM
Dave
No application should ever store passwords, what is stored is a one way hash
of the password, when a user enters their password it is hashed and compared
to the stored hash, if they match the correct password was entered. Could
you please explain what is the point of having a password if it can be
retrieved, it would somewhat make the password pointless.

The morals are:
1) Don't forget your password
2) Don't try to get hacking tips here by pretending to ask questions.

Regards
Dave O.

Show quoteHide quote
"angelito tan" <diamond_shoe1***@yahoo.com> wrote in message
news:1138676970.153024.100480@f14g2000cwb.googlegroups.com...
> just wondering where does the password go after it's created ??? coz it
> really make me confuse since i'm using xp .. what if u forgot ur
> password, how can u get it ??
>
Author
31 Jan 2006 3:41 PM
Veign
Adding:

When you store a Hashed password you should also include a Salt value
(random and different for each stored hash value).  This prevents hackers
from using pre-hashed password lists (which are easily found) and a brute
force method....

Info (even though the code is ASP it gives info in Hashing and Salt values):
http://www.15seconds.com/issue/000217.htm

--
Chris Hanscom - Microsoft MVP (VB)
Veign's Resource Center
http://www.veign.com/vrc_main.asp
Veign's Blog
http://www.veign.com/blog
--


Show quoteHide quote
"Dave" <nob***@nowhere.com> wrote in message
news:%23rPU8WlJGHA.2864@TK2MSFTNGP10.phx.gbl...
> No application should ever store passwords, what is stored is a one way
> hash of the password, when a user enters their password it is hashed and
> compared to the stored hash, if they match the correct password was
> entered. Could you please explain what is the point of having a password
> if it can be retrieved, it would somewhat make the password pointless.
>
> The morals are:
> 1) Don't forget your password
> 2) Don't try to get hacking tips here by pretending to ask questions.
>
> Regards
> Dave O.
>
> "angelito tan" <diamond_shoe1***@yahoo.com> wrote in message
> news:1138676970.153024.100480@f14g2000cwb.googlegroups.com...
>> just wondering where does the password go after it's created ??? coz it
>> really make me confuse since i'm using xp .. what if u forgot ur
>> password, how can u get it ??
>>
>
>
Author
31 Jan 2006 4:25 PM
Dave
Good idea, although hash codes are one of the few cases where "security
through obscurity" actually can work.

Dave O.


Show quoteHide quote
"Veign" <NOSPAMinveign@veign.com> wrote in message
news:e4inx1nJGHA.3064@TK2MSFTNGP10.phx.gbl...
> Adding:
>
> When you store a Hashed password you should also include a Salt value
> (random and different for each stored hash value).  This prevents hackers
> from using pre-hashed password lists (which are easily found) and a brute
> force method....
>
> Info (even though the code is ASP it gives info in Hashing and Salt
> values):
> http://www.15seconds.com/issue/000217.htm
>
> --
> Chris Hanscom - Microsoft MVP (VB)
> Veign's Resource Center
> http://www.veign.com/vrc_main.asp
> Veign's Blog
> http://www.veign.com/blog
> --
>
>
> "Dave" <nob***@nowhere.com> wrote in message
> news:%23rPU8WlJGHA.2864@TK2MSFTNGP10.phx.gbl...
>> No application should ever store passwords, what is stored is a one way
>> hash of the password, when a user enters their password it is hashed and
>> compared to the stored hash, if they match the correct password was
>> entered. Could you please explain what is the point of having a password
>> if it can be retrieved, it would somewhat make the password pointless.
>>
>> The morals are:
>> 1) Don't forget your password
>> 2) Don't try to get hacking tips here by pretending to ask questions.
>>
>> Regards
>> Dave O.
>>
>> "angelito tan" <diamond_shoe1***@yahoo.com> wrote in message
>> news:1138676970.153024.100480@f14g2000cwb.googlegroups.com...
>>> just wondering where does the password go after it's created ??? coz it
>>> really make me confuse since i'm using xp .. what if u forgot ur
>>> password, how can u get it ??
>>>
>>
>>
>
>
Author
31 Jan 2006 4:29 PM
Veign
It amazes me how many people know nothing about hashing and are creating
applications (web) where they are storing passwords in an un-encrypted way.
This is the reason I generate a new password for every login.

--
Chris Hanscom - Microsoft MVP (VB)
Veign's Resource Center
http://www.veign.com/vrc_main.asp
Veign's Blog
http://www.veign.com/blog
--


Show quoteHide quote
"Dave" <nob***@nowhere.com> wrote in message
news:OPJpmLoJGHA.1424@TK2MSFTNGP12.phx.gbl...
> Good idea, although hash codes are one of the few cases where "security
> through obscurity" actually can work.
>
> Dave O.
>
>
> "Veign" <NOSPAMinveign@veign.com> wrote in message
> news:e4inx1nJGHA.3064@TK2MSFTNGP10.phx.gbl...
>> Adding:
>>
>> When you store a Hashed password you should also include a Salt value
>> (random and different for each stored hash value).  This prevents hackers
>> from using pre-hashed password lists (which are easily found) and a brute
>> force method....
>>
>> Info (even though the code is ASP it gives info in Hashing and Salt
>> values):
>> http://www.15seconds.com/issue/000217.htm
>>
>> --
>> Chris Hanscom - Microsoft MVP (VB)
>> Veign's Resource Center
>> http://www.veign.com/vrc_main.asp
>> Veign's Blog
>> http://www.veign.com/blog
>> --
>>
>>
>> "Dave" <nob***@nowhere.com> wrote in message
>> news:%23rPU8WlJGHA.2864@TK2MSFTNGP10.phx.gbl...
>>> No application should ever store passwords, what is stored is a one way
>>> hash of the password, when a user enters their password it is hashed and
>>> compared to the stored hash, if they match the correct password was
>>> entered. Could you please explain what is the point of having a password
>>> if it can be retrieved, it would somewhat make the password pointless.
>>>
>>> The morals are:
>>> 1) Don't forget your password
>>> 2) Don't try to get hacking tips here by pretending to ask questions.
>>>
>>> Regards
>>> Dave O.
>>>
>>> "angelito tan" <diamond_shoe1***@yahoo.com> wrote in message
>>> news:1138676970.153024.100480@f14g2000cwb.googlegroups.com...
>>>> just wondering where does the password go after it's created ??? coz it
>>>> really make me confuse since i'm using xp .. what if u forgot ur
>>>> password, how can u get it ??
>>>>
>>>
>>>
>>
>>
>
>