FACTOID # 20: Statistically, Delaware bears more cost of the US Military than any other state.
 
 Home   Encyclopedia   Statistics   States A-Z   Flags   Maps   FAQ   About 
   
 
WHAT'S NEW
 

SEARCH ALL

FACTS & STATISTICS    Advanced view

Search encyclopedia, statistics and forums:

 

 

(* = Graphable)

 

 


Encyclopedia > Windows Live ID
Windows Live ID
Windows Live ID logo
A screenshot of Windows Live ID Sign-in page
Windows Live ID Sign-in page
Developer: Microsoft
Website: http://login.live.com

Windows Live ID (originally named .NET Passport; briefly Microsoft Passport Network) is a "unified-login" service developed and provided by Microsoft that allows users to log in to many websites using one account. It was originally positioned as a single sign-on service for all web commerce. Image File history File links No higher resolution available. ... Image File history File links No higher resolution available. ... “Software development” redirects here. ... Microsoft Corporation, (NASDAQ: MSFT, HKSE: 4338) is a multinational computer technology corporation with global annual revenue of US$44. ... A website (alternatively, Web site or web site) is a collection of Web pages, images, videos and other digital assets that is hosted on one or several Web server(s), usually accessible via the Internet, cell phone or a LAN. A Web page is a document, typically written in HTML... Microsoft Corporation, (NASDAQ: MSFT, HKSE: 4338) is a multinational computer technology corporation with global annual revenue of US$44. ... A website (alternatively, Web site or web site) is a collection of Web pages, images, videos and other digital assets that is hosted on one or several Web server(s), usually accessible via the Internet, cell phone or a LAN. A Web page is a document, typically written in HTML... Single sign-on (SSO) is a specialized form of software authentication that enables a user to authenticate once and gain access to the resources of multiple software systems. ...

Contents

Product overview

Most of the web sites and applications that use Windows Live ID are Microsoft sites and services such as Hotmail, MSNBC, MSN, Xbox 360's Xbox Live, the .NET Messenger Service, Zune or MSN subscriptions, but there are also several other companies affiliated with Microsoft that use it, such as Expedia and Hoyts. Users of Hotmail or MSN automatically have a Windows Live ID that corresponds to their accounts. Most recently user log in data has started to allow demographic targeting by advertisers using Microsoft adCenter. Hotmail is a free webmail e-mail service, which is accessible via a web browser. ... MSNBC, a combination of MSN and NBC, is a 24-hour cable news channel in the United States and Canada, and a news website. ... For other uses, see MSN (disambiguation). ... Xbox Live is a subscription-based online gaming service for Microsofts Xbox and Xbox 360 video game consoles. ... The . ... This article is about the digital media brand. ... For other uses, see MSN (disambiguation). ... Expedia. ... Current Logo of Hoyts Cinemas Australia introduced in Jan 2007 Hoyts is an Australian chain of cinema multiplexes. ... Hotmail is a free webmail e-mail service, which is accessible via a web browser. ... For other uses, see MSN (disambiguation). ... This article or section does not adequately cite its references or sources. ...


Microsoft's Windows XP has an option to link a Windows user account with a Windows Live ID (appearing with its former names), logging users into Windows Live ID whenever they log into Windows. Windows XP is a line of operating systems developed by Microsoft for use on general-purpose computer systems, including home and business desktops, notebook computers, and media centers. ...


Windows Live ID's relationship to Windows CardSpace, a component of Windows Vista, is unknown at this time; Microsoft's own Chief Identity Architect, Kim Cameron, has questioned Windows Live ID in his Laws of Identity, many of which are violated by Windows Live ID. This subsystem is a part of . ... Windows Vista is a line of graphical operating systems used on personal computers, including home and business desktops, notebook computers, Tablet PCs, and media centers. ...


On August 15, 2007, Microsoft released Windows Live ID Web Authentication, opening Windows Live ID to web site developers.


Technical overview

A new user entering a commerce server will first be redirected to the nearest authentication server, which asks for username and password over an SSL-secured connection, unless the user can present a valid GLOBALAUTH-cookie. In return, a newly accepted user (a) has an encrypted time-limited GLOBALAUTH-cookie implanted on his computer and (b) receives a triple DES encrypted ID-tag that previously has been agreed upon, between the authentication and the commerce server. This ID-tag is then sent to the commerce server, upon which the commerce server plants an encrypted LOCALAUTH-cookie in the user’s computer, also time-limited. The presenting of these LOCAL and GLOBAL cookies to various commerce and authentication servers prevents the need for authentication within the time of validity, as in the Kerberos protocol. Secure Sockets Layer (SSL) and Transport Layer Security (TLS), its successor, are cryptographic protocols which provide secure communications on the Internet. ... This article is about the HTTP state mechanism. ... In cryptography, Triple DES (also 3DES) is a block cipher formed from the Data Encryption Standard (DES) cipher. ... This article is about the HTTP state mechanism. ... Kerberos is the name of a computer network authentication protocol, which allows individuals communicating over an insecure network to prove their identity to one another in a secure manner. ...


If the user actively logs out of Windows Live ID, these cookies will be removed; however, users are often confused by other commerce server logout functions, and unintentionally leave these cookies intact. The service also depends on users allowing their browsers to ship cookies to servers other than the one they originated from.


Following recent updates to Windows XP, some users experience popups asking them to enter their Windows Live ID whenever they browse to their Documents and Settings/username/ folder, whether or not they have such an ID or use those services. This can be prevented by deleting the item "My web sites on MSN" from the NetHood subfolder in this folder, which apparently causes this by trying to access the network.


Digital rights and early criticism

Windows Live ID (at the time Microsoft Passport) was criticized by the Electronic Frontier Foundation's staff attorney Deborah Pierce as a potential threat to privacy after it was revealed that Microsoft would have full access to and usage of customer information.[1] The privacy terms were quickly updated by Microsoft to allay customers' fears. EFF Logo The Electronic Frontier Foundation (EFF) is an international non-profit advocacy and legal organization based in the United States with the stated purpose of being dedicated to preserving free speech rights such as those protected by the First Amendment to the United States Constitution in the context of...


Security issues

Windows Live ID is used by many services to prove ownership of a user's e-mail address. However a security breach was found in Windows Live ID on June 17, 2007 by Erik Duindam, a web developer in the Netherlands, who reported a "critical error was made by Microsoft programmers that allows everyone to create an ID for virtually any e-mail address." [2] is the 168th day of the year (169th in leap years) in the Gregorian calendar. ... Year 2007 (MMVII) is the current year, a common year starting on Monday of the Gregorian calendar and the AD/CE era in the 21st century. ...


The problem arose around the e-mail verification link received upon a new Windows Live ID registration. A procedure was found to allow users to register invalid or currently used e-mail addresses. After registration with a valid e-mail address that the user does have access to, a verification link is received. Before using it however, the user is allowed to change the initial email address to one that doesn't exist, or an existing email address currently used by another user. After logging out a second time and confirming using the first link, the Microsoft system simply confirms the account using the invalid or unowned email address. This implies possible privacy and identity risks, for example a colleague pretending to be the user's manager or a media reporter pretending to be an investor using the Windows Live Messenger service. For the old versions of this software called MSN Messenger, see MSN Messenger. ...


This problem was acknowledged and fixed by Microsoft on June 19, 2007. Without confirmation of the e-mail address, Microsoft will include a warning with any future instant messages sent on Windows Live Messenger, which will appear as "fake@emailaddress (E-mail Address Not Verified)." However, any existing accounts created with fake e-mail addresses were still active as of June 20, 2007 without the warning message. Microsoft did not provide any further information on the security flaw's impact.[3] is the 170th day of the year (171st in leap years) in the Gregorian calendar. ... Year 2007 (MMVII) is the current year, a common year starting on Monday of the Gregorian calendar and the AD/CE era in the 21st century. ... is the 171st day of the year (172nd in leap years) in the Gregorian calendar. ... Year 2007 (MMVII) is the current year, a common year starting on Monday of the Gregorian calendar and the AD/CE era in the 21st century. ...


References

  1. ^ Privacy terms revised for Microsoft Passport
  2. ^ http://www.erikduindam.com/windowslive.pdf "Windows Live ID security breached" on erikduindam.com
  3. ^ "Windows Live Bug Opened Door to Scammers" - PC World

See also

The Liberty Alliance, also known as Project Liberty, is a broad-based industry standards consortium developing suites of specifications defining federated identity management and web services communication protocols. ... The Organization for the Advancement of Structured Information Standards (OASIS) is a global consortium that drives the development, convergence and adoption of e-business and web service standards. ... Xbox Live is a subscription-based online gaming service for Microsofts Xbox and Xbox 360 video game consoles. ... OpenID is a decentralized system to verify ones online identity. ... // Fostering online trust relationships YADIS (Yet Another Distributed Identity System) is an open initiative to build an interoperable lightweight discovery protocols for human-centred data exchange. ... Light-Weight Identity (LID) is a system created by NetMesh for verifying identity on the Internet. ... This subsystem is a part of . ... Windows Live is the collective brand name for a set of services and software products from Microsoft. ...

External links


 
 

COMMENTARY     


Share your thoughts, questions and commentary here
Your name
Your comments

Want to know more?
Search encyclopedia, statistics and forums:

 


Press Releases |  Feeds | Contact
The Wikipedia article included on this page is licensed under the GFDL.
Images may be subject to relevant owners' copyright.
All other elements are (c) copyright NationMaster.com 2003-5. All Rights Reserved.
Usage implies agreement with terms, 1022, m