Squarespace: They Asked for My Password.

Re:Squarespace: They Asked for My Password. by viraptor on Friday February 14, 2014 @08:30AM (#7238339)

Oh no, it's definitely the company's fault. Any real service where support may need to get involved will provide the support people with an admin interface or a way to login as the user without their password. That's the standard way to do it.

If they didn't provide that and didn't explicitly say "never ask for password", that's really the company's fault.

[ Parent | on HN ]

Re:Squarespace: They Asked for My Password. by odonnellryan on Friday February 14, 2014 @09:17AM (#7238583)

Where's the window's admin interface to log in as another user...?

[ Parent | on HN ]

Re:Squarespace: They Asked for My Password. by Ensorceled on Friday February 14, 2014 @09:24AM (#7238615)

"su - user" has existed for at least 30 years.

Oh, right, Windows. Using Windows as a counter point to any argument on best practices is silly. But even then, as your domain admin, I can reset your password, login as you and then reset a new temporary password for you. I have done this and would never ask a user for their password. Even on windows.

[ Parent | on HN ]

Re:Squarespace: They Asked for My Password. by mschuster91 on Friday February 14, 2014 @09:42AM (#7238717)

...which wipes out access to my OS-level encrypted files, thank you very much dear admin

[ Parent | on HN ]

Re:Squarespace: They Asked for My Password. by Ensorceled on Friday February 14, 2014 @09:50AM (#7238760)

Which, again, is another reason not to use windows...

[ Parent | on HN ]

Re:Squarespace: They Asked for My Password. by odonnellryan on Friday February 14, 2014 @10:21AM (#7238955)

True, but, I think the most-used software isn't a "bad" example to use in an argument.

[ Parent | on HN ]

Re:Squarespace: They Asked for My Password. by Ensorceled on Friday February 14, 2014 @11:52AM (#7239458)

I think it is when that most-used software is notoriously insecure. Certainly when used as a standalone argument. But hey, minor point :-)

[ Parent | on HN ]

Re:Squarespace: They Asked for My Password. by viraptor on Friday February 14, 2014 @10:12AM (#7238909)

1. I wrote service as in service provided on the web, not software. I'm sure online office (360, live, or whatever the name is this week) support has the ability to get to your documents though.

2. There's runas.

3. There's lots of examples of software that allows you to use the system remotely. Some of them have signatures in the virus databases, some don't.

[ Parent | on HN ]

Re:Squarespace: They Asked for My Password. by odonnellryan on Friday February 14, 2014 @10:23AM (#7238970)

> I'm sure online office (360, live, or whatever the name is this week) support has the ability to get to your documents though.

I have an admin account for an Office365 subscription, I can absolutely NOT impersonate a user. From what I know, Microsoft can not either.

Runas doesn't let me "see the error the user has"

[ Parent | on HN ]

Re:Squarespace: They Asked for My Password. by viraptor on Friday February 14, 2014 @12:09PM (#7239549)

You're assuming that admin account has the same or more privileges as a local MS's support account. Is there a reason for that?

[ Parent | on HN ]

Re:Squarespace: They Asked for My Password. by odonnellryan on Sunday February 16, 2014 @10:07AM (#7247783)

Well, you assumed a lot of stuff in your post, too..

But yes. Microsoft will actually reset your password, or ask you for it, to troubleshoot O365 problems. Very standard.

[ Parent | on HN ]

Re:Squarespace: They Asked for My Password. by skywhopper on Friday February 14, 2014 @09:47AM (#7238743)

runas.exe: http://technet.microsoft.com/en-us/library/bb490994.aspx

[ Parent | on HN ]

Re:Squarespace: They Asked for My Password. by odonnellryan on Friday February 14, 2014 @10:36AM (#7239054)

(I know there's software for this) but that doesn't let me use the environment as the user. Lots of times, things are profile related.

[ Parent | on HN ]