I-Appliance BBS
The Official Source for Internet Appliance Upgrades and Mods
Amazon Honor System Click Here to Pay Learn More
BBS Main List | Sign In | Sign Up | Search | Help | Linux-Hacker.netReply to Thread | Printer |

Home / Other I-Appliances / MSN Companion
MSN Companion shows username and password unencrypted in plain text - be careful about backup

New MessageMSN Companion shows username and password unencrypted in plain text - be careful about backup (modified 0 times) ranman
Profile
In case anyone is thinking of backing up their msn companion OS, it shows your username and password in plain text which anyone could read. This is NOT a problem if you never used the IA-1 to sign up for MSN.

If you don't plan on sharing the images, it might not be a problem, but I sure don't like having my username and password sitting around in plain site. If you plan on using MSN don't do this or you will have to go through the entire setup process again. The 2 codes below probably work after you hit move to next number on each number it tries to dial. Then select 'problem not listed above' and it will put you to a screen where it says to type the code the MSN/Compaq people tell you to type.

To erase your username and password, the MURMUR code will do this, but it will also erase the modem numbers and settings, and EVERY other setting. Kind of like the 3x password error on the audrey.

The other code I have come across is FIXIT, which will allow you access to the modem dial page, but not much else. When I first got mine, I in fact created an MSN account with the username and password that was identical to account that I had on another provider, but I was not able to get connected. So I guess it is looking for some specific MSN stuff when it calls.

And I tried the fixit code on MSN companion 2.0 - it does not seem to work.


ranman

11-10-2001 12:35:47

New MessageRE:MSN Companion shows username and password unencrypted in plain text - be careful about backup (modified 0 times) ranman
Profile
The name of the file in question is $upginfo.inf

I do not know if this is the case or not with msn companion 2.0, but it is was with my copy of msn companion 1.0. The file $upginfo.inf is located on both partitions (i.e. D: and E: of the system).

If you look at the file in windows, it is too big for notepad, so wordpad will load but you won't see anything useful. It has to be a dos type text editor - I used norton commander's (circa 1989) built-in editor/viewer.

Some type of username and password is also stored in the same file on both drives in msn companion, but it was not MY username or password. Maybe they have it fixed in 2.0?

Anyone else notice this?

ranman

11-10-2001 13:25:00

New MessageRE:MSN Companion shows username and password unencrypted in plain text - be careful about backup (modified 0 times) keith721
Profile
ranman:

i'm having a bear of a time, getting my IA-1 to recognize a bootable 32 megabyte SanDisk CF card. i started by clearing the card, opening a DOS window within WIN98SE, and typing the command:
C:\> format g: /s
and then copying xcopy32.exe and dolly.exe to g: also.
when attempting to boot with this CF in the IA-1, all i get is the message:
Enter the name of the command interpreter (i.e., C:\WINDOWS\COMMAND.COM)
C>

do i need to add a config.sys file that says COMMAND=D:\COMMAND.COM or something?

thanks,
keith721

11-10-2001 14:59:15

New MessageRE:MSN Companion shows username and password unencrypted in plain text - be careful about backup (modified 0 times) ranman
Profile
Keith721,
When I first got mine, I had the same problem as you describe now. Unfortunately, this was way back in march or so, so I can't remember what I did to remedy the problem.

I know that after I started using Ranish partition manager, things seemed to work fine. Does the card have the boot flag marked? Fdisk will only put the flag on the first hard disk. That might be the problem?

Ranish allows you to put the boot flag on easily. This should make the difference.

The other way to try would be to do another format g: (without /s) and then doing a sys g:

I remember I had the same problem with it not finding command.com even though the dang this was right there on the disk.


ranman

11-10-2001 15:06:34

New MessageRE:MSN Companion shows username and password unencrypted in plain text - be careful about backup (modified 0 times) keith721
Profile
ranman: thanks for the quick response. in WIN98, the environment variable is named COMSPEC, but i'm trying to dig out an old MS-DOS 6.22 disk, right now. i believe in 6.22, it was named COMMAND. anyway, if all else fails, i'll try my Norton Disk Doctor and/or Ranish. i'll let you know what works... keith721
11-10-2001 15:11:52

New MessageRE:MSN Companion shows username and password unencrypted in plain text - be careful about backup (modified 0 times) keith721
Profile
ranman: nope. DOS622 just kinda sits there with a dumb blank screen. at least WIN98SE complains about wanting the name of the Command Interpreter. it even displays the WIN98 boot splash screen, very briefly, before complaining.

i haven't pulled out the Norton Disk Doctor yet. i'm trying Ranish V2.38, but it doesn't appear to have a clue about the USB/ATA Compact Flash drive. i believe V2.40 is available, so i'll try that next. can you tell me what version or Ranish you're using, and how you get it to address the CF card?

thanks again....

11-10-2001 17:26:44

New MessageRE:MSN Companion shows username and password unencrypted in plain text - be careful about backup (modified 0 times) ranman
Profile
I am using Ranish 2.41.

The problem is probably that you have put the card in after you booted. Ranish and dolly only seemed to work while the card was there at bootup so it could determine the card's parameters.

So turn your win98 system off. Put the card in, reboot. Stay in win98 and use ranish and set boot flag.
It worked no problem for me while in win98.

Hope this helps.

ranman

11-10-2001 21:18:28

New MessageRE:MSN Companion shows username and password unencrypted in plain text - be careful about backup (modified 0 times) keith721
Profile
well, i found bballctaulbee's message in the other thread, describing exactly what you mentioned about the FAT-12 partitions (YUCK ) and not having the boot flag set on the CF partition. since i downloaded Ranish 2.40, and re-defined the partition info, i've been just fine. got all of MSN 1.0 backed up and now i'm just waiting for the MSN 2.0 update to go in around 2:00 a.m. my time tonight. after backing up (and sanitizing) the 2.0 partitions, i'll start attempting to apply the WIN98SE operating system. thanks again for all your help. i realize you started with this several months ago, it's just now that the rest of us are catching up to you... hope i can offer some helpful information, as i move forward.
11-10-2001 21:59:18

New MessageRE:MSN Companion shows username and password unencrypted in plain text - be careful about backup (modified 0 times) ranman
Profile
Keith721,
No problem. I am trying to supply the information that I know so that people can get to the point that I am, and then I am sure, will find out way more. Yeah, I have had my IAone running win98 for a few months, but haven't made any improvements on it since then.
What I would love to see would be a much faster/better processor running without any added fans.


Also, I have my msn companion 2.0 backed up. If you would like, send me your ICQ# and you can get it from me. Unfortunately I only have 56k dialup.

Having to wait is a big pain in the butt just like it was for the audrey, and that was for just 5 minutes!


ranman

11-10-2001 22:04:30

New MessageRE:MSN Companion shows username and password unencrypted in plain text - be careful about backup (modified 0 times) Zack
Profile
Isn't there a better way to do this guys? Hell, i'm not looking for a small machine that will run Win98 on it. I really only wanted a compact, instant on, internet capable appliance that uses very little power, just so that I can leave it in the family room, or somewhere else for surfing the web and checking email without waiting for a computer to boot. Shouldn't there be a way to edit the Windows CE registry (if there is such a thing) and disable the MSN portion of the device? Someone please let me know if i'm out of my mind here, or if it hasn't really been tried yet.

Zack

11-10-2001 22:49:52

New MessageRE:MSN Companion shows username and password unencrypted in plain text - be careful about backup (modified 0 times) ranman
Profile
Zack,
Yes, what you describe is what I would like too. But, I know nothing about the MSN companion OS (custom winCE) and all of its files are either .bin or .cim - no idea what they are. Overall, it is just too limited I think. The buttons on either side of the trackball type thingy only function as a left mouse key. The browser takes away too much of the screen real estate and it is just toooooooooo friggin slow.

If someone could get a standard winCE on it that would be great. I would prefer to use an OS that would fully enable the keyboard, video, sound, modem, and USB just as the default OS does, but without the limitation of using MSN. And if winCE were on it, we could use the compact flash for wireless network - that would be PERFECT. But we are not at that point yet.

I think some of us (including me) are using windows on it because then it is like a small computer and we can then use it to do anything.

If you give it some time, I think some very smart people will come up with what you and I would like to see. This board has been around for a little less than 6 months, but posting didn't start heavily until last month.

Maybe Keith721 and bbsux and others will come up with something. They seem pretty knowledgeable.

ranman

11-10-2001 23:07:07

New MessageRE:MSN Companion shows username and password unencrypted in plain text - be careful about backup (modified 0 times) Zack
Profile
Hey Ranman, thanks for your response. I wish I was a programmer so that I could do this on my own, but at the moment i'm only an IT Manager and not a programmer. I know that if I start playing with it, i'll eventually figure something out. Tell me this at least, how quickly does win98 boot off CF? I'd hate to think that it booted as slowly as any old AMD K5 computer would. Also, what do you do for swap space? Won't win98 quickly wear out a CF card?

Zack

11-11-2001 09:06:57

New MessageRE:MSN Companion shows username and password unencrypted in plain text - be careful about backup (modified 0 times) GSGuillot
Profile | Email
Ranman, Keith721, bbsux:
Since you have a 56K dialup, would you strip off just the first 1K of the "virgin" image of your IA-1 (v1.0 and v2.0 if you have them) and send them to me?

I think I have my email address exposed in my profile, but in case I don't it is gsguillot@gsguillot.com (home) and/or gsguillot@demandsolutions.com (work)

And, is there a chance I can get your emails?

-Scott.

11-14-2001 10:22:42

New MessageRE:MSN Companion shows username and password unencrypted in plain text - be careful about backup (modified 0 times) keith721
Profile
scott:

it's my message board nickname AT carolina dot rr dot com - i've just finished three days of off site training, during which i haven't done too much. however, i do have the 'dolly' copies of the internal SanDisk, from which i should be able to extract the first 1Kb. i don't think that will give you any of the bios, though. if that's what you're looking for, ranman has extracted his bios; i haven't (yet). anyway, the MSN V1 image is 'virgin', since i could copy it as it came with the IA-1 device. the MSN V2 image is 'dirty', since i had to sign up for an account, to upgrade to V2. so, bear with me, and i'll see what i can get to you, without giving away any of my personal MSN account information....

keith721

11-14-2001 18:27:09

New MessageRE:MSN Companion shows username and password unencrypted in plain text - be careful about backup (modified 0 times) GSGuillot
Profile | Email
Keith721:

Wow. Playing catch-up after three days from work is oh-so-lots of fun.

The first K of data from the *images* is what I want to look at, not the bios. And whether the image is a v1 or a v2 image does not matter. I would rather have both for completeness.

Yes, sanitize the data you send out. I have no need or reason to see sensative information.

Thank You.

-Scott.

11-14-2001 21:52:01

Reply to Thread | Printer |
All times are PSTPowered by UltraBoard v1.62



Copyright © 2000, Netmake Inc. All Rights Reserved.
See Terms and Conditions for more information.




i-opener opener laptop notebook computer help drivers dll free windows dos repair fix linux mac macintosh 2000 95 98 nt pc configure hardware software sound video netscape explorer network networking lan wan software cmos fat bios printer card mouse modem ide scsi cd rom controllers scanner tape hard drive cgi scripts source code mp3