 Up |
|
|
  |
Author: PaulPaul Date: Jun 29, 2008 08:26
I forgot my password for Office One Note.
Is there a way to reset it without the old one?
|
| |
|
| | 9 Comments |
|
|
Author: Ben M. Schorr - MVP (OneNote)Ben M. Schorr - MVP (OneNote) Date: Jun 29, 2008 10:14
> I forgot my password for Office One Note.
>
> Is there a way to reset it without the old one?
|
| |
|
| | no comments |
|
|
Author: MikeMike Date: Jun 30, 2008 11:25
Just to satisfy my curiousity I did a Google search for "crack onenote
password" and found a list of tools to crack the OneNote password. So I'm
confused. If these tools work and it is this easy to compromise OneNote and
gain access to a password protected section then what is the benefit of
having a password protected section?
"Ben M. Schorr - MVP (OneNote)" wrote:
|
| Show full article (0.88Kb) |
| 1 Comment |
|
|
|
|
|
Author: Ben M. Schorr - MVP (OneNote)Ben M. Schorr - MVP (OneNote) Date: Jun 30, 2008 15:41
It's not intended to be Department of Defense certified security. If
you need that level of protection then you should be implementing
operating system level measures like drive encryption and strong
passwords.
Like a deadbolt on a glass door -- it's not intended to stop a
determined and skilled attacker. It's intended to deter the casual
browser/thief.
--
-Ben-
Ben M. Schorr, MVP
Roland Schorr & Tower
http://www.rolandschorr.com
http://www.officeforlawyers.com
Author - The Lawyer's Guide to Microsoft Outlook 2007:
http://tinyurl.com/5m3f5q
"Mike" discussions.microsoft.com> wrote in message
news:AC6EC348-6E9F-41F2-BB51-1BFFDCDC7DF2@microsoft.com:
> Just to satisfy my curiousity I did a Google search for "crack onenote
> password" and found a list of tools to crack the OneNote password. So I'm
> confused. If these tools work and it is this easy...
|
| Show full article (1.61Kb) |
| no comments |
|
|
Author: MikeMike Date: Jun 30, 2008 16:28
It doesn't take a skilled and determined attacker to search Google and
download a password recovery tool.
http://www.lostpassword.com/onenote.htm
It looks like the password protection is useless except for superficial
protection. Someone please tell me I'm wrong!
"Ben M. Schorr - MVP (OneNote)" wrote:
> It's not intended to be Department of Defense certified security. If
> you need that level of protection then you should be implementing
> operating system level measures like drive encryption and...
|
| Show full article (2.04Kb) |
| 1 Comment |
|
|
Author: YouBetchaYouBetcha Date: Jul 1, 2008 15:35
Mike,
Read the following from their web page:
"MS OneNote uses relatively strong encryption algorithm that makes instant
password calculation impossible. Brute-force attack is the slowest approach
and can test all the passwords of up to 6 characters. Xieve™ attack is much
faster and is capable of recovering passwords of up to 9 characters.
Dictionary attack is the fastest method - there is no limitation on password
length. "
Their software relies on you using an "easy" password and it tries various
combinations of words. When they say "instant password calculation [is]
impossible" what they do not tell you is, how long it would take the software
to actually crack it, if it is not something from their dictionary.
You should send them an e-mail, give them a reasonably strong password
(something with combinations of letters and numbers, say a string of 10-12
characters and numbers, that can't be looked up in a dictionary) and ask them
how long it might take. I'm not sure from the description above it would be
able to do it at all. But make sure you tell them it is OneNote 2007 (not
Word 97). Let us know their response.
"Mike" wrote:
> It doesn't take a skilled and determined attacker to search Google and
> download a password recovery tool.
>
> http://www.lostpassword.com/onenote.htm
>
> It looks like the password protection is...
|
| Show full article (3.36Kb) |
| no comments |
|
|
|
|
|
Author: Ben M. Schorr - MVP (OneNote)Ben M. Schorr - MVP (OneNote) Date: Jul 1, 2008 15:55
"It doesn't take a skilled and determined attacker to search Google and
download a password recovery tool."
Well...Paul didn't do it, did he? :-)
"Superficial" is a subjective word here. OneNote's password protection
deters the casual browser and if you have picked a sufficiently strong
pass phrase then it may well thwart the more determined effort too.
If you use "hello" as your password then it probably doesn't much matter
what algorithm you use.
OneNote's password feature is a padlock, not a bank vault.
--
-Ben-
Ben M. Schorr, MVP
Roland Schorr & Tower
http://www.rolandschorr.com
http://www.officeforlawyers.com/onenote.htm
"Mike" discussions.microsoft.com> wrote in message
news:16EABE27-A298-430A-8976-6F0B35A418F0@microsoft.com:
> It doesn't take a skilled and determined attacker to search Google and
> download a password recovery tool.
>
> http://www.lostpassword.com/onenote.htm
>
> It looks like the password protection is useless...
|
| Show full article (2.94Kb) |
| no comments |
|
|
|
|
|
Author: Erik Sojka (MVP)Erik Sojka (MVP) Date: Jul 1, 2008 16:00
Correct - with any password system, you should choose a password which is
not easily found in a dictionary, and is very long. I typically choose
whatever catchphrase or song lyric that is rattling around in my head,
change a few characters to alternate case or number/symbols, adjust the
spacing, and I then have a very long password (which should be impossible
to crack) which I can still remember.
"tiptoe through the tulips"
becomes
"T!ptoe through theT\/lip3"
That's a nigh-uncrackable 25-character password.
=?Utf-8?B?WW91QmV0Y2hh?= discussions.microsoft.com> wrote in
news:C5038D1F-03A6-49E0-B02A-1AEE7AA6FF10@microsoft.com:
> Mike,
>
> Read the following from their web page:
>
> "MS OneNote uses relatively strong encryption algorithm that makes
> instant password calculation impossible. Brute-force attack is the
> slowest...
|
| Show full article (4.13Kb) |
| no comments |
|
RELATED THREADS |
|
|
|
