ITRC forum... does anybody use it?

I can never get logged into the damn thing. I wrote down the stupid CA####### account number and the password the last time I did get in. EVERYTIME I want to use it I can not get back in. If it weren't for that stupid account number and the password restriction they impose, I might remember the damn access info without having to write it down... great security that is, eh? -- VAXman- A Bored Certified VMS Kernel Mode Hacker VAXman(at)TMESIS(dot)COM "Well my son, life is like a beanstalk, isn't it?" http://tmesis.com/drat.html

On Aug 13, 11:42 am, VAXman- @SendSpamHere.ORG wrote: > I can never get logged into the damn thing. > > I wrote down the stupid CA####### account number and the password the > last time I did get in. EVERYTIME I want to use it I can not get back > in. > > If it weren't for that stupid account number and the password restriction > they impose, I might remember the damn access info without having to write > it down... great security that is, eh? > -- > VAXman- A Bored Certified VMS Kernel Mode Hacker VAXman(at)TMESIS(dot)COM > > "Well my son, life is like a beanstalk, isn't it?" > > http://tmesis.com/drat.html Brian, I believe that you can enter your email address and it will locate your account info (you do need to remember your password). - Bob Gezelter, http://www.rlgsc.com

In article <1187021440.892936.133220@57g2000hsv.googlegroups.com>, Bob Gezelter <gezelter@rlgsc.com> writes: > > >On Aug 13, 11:42 am, VAXman- @SendSpamHere.ORG wrote: >> I can never get logged into the damn thing. >> >> I wrote down the stupid CA####### account number and the password the >> last time I did get in. EVERYTIME I want to use it I can not get back >> in. >> >> If it weren't for that stupid account number and the password restriction >> they impose, I might remember the damn access info without having to write >> it down... great security that is, eh? >> -- >> VAXman- A Bored Certified VMS Kernel Mode Hacker VAXman(at)TMESIS(dot)COM >> >> "Well my son, life is like a beanstalk, isn't it?" >> >> http://tmesis.com/drat.html > >Brian, > >I believe that you can enter your email address and it will locate >your account info (you do need to remember your password). I've asked it to send me the account number... nothing. I just asked it to reset the password... nothing. I tried to re-register and it says I already have an account using the email address I provided and it showed me the CA#######. Dumb! I have received no email from ITRC and there is no published human contact information. HP support... Hopelessly Pathetic. -- VAXman- A Bored Certified VMS Kernel Mode Hacker VAXman(at)TMESIS(dot)COM "Well my son, life is like a beanstalk, isn't it?" http://tmesis.com/drat.html

> I've asked it to send me the account number... nothing. > I just asked it to reset the password... nothing. > Several times I've had a problem with the ITRC login telling me that my password, which I hadn't changed in months, was invalid. I asked it to reset the password. What I got via e-mail took me to a ITRC page to enter a new password, but it wouldn't let me change the password to anything else. I'd enter the old password, then enter the new password twice for verification, and it would tell me that the old password was invalid. Neither my "old" password (the one I had before the problem) nor the "new" one from the e-mail was accepted. Each time I had to call HP support to get this fixed. The support person would manually set my password to something I chose. Then I was able to log in and change it again. They had no idea why this was happening. It's been a few months since the last time this happened to me, so it's probably due again soon. :-)

On Aug 13, 11:19 am, VAXman- @SendSpamHere.ORG wrote: > In article <1187021440.892936.133...@57g2000hsv.googlegroups.com>, Bob Gezelter <gezel...@rlgsc.com> writes: > > > > > > >On Aug 13, 11:42 am, VAXman- @SendSpamHere.ORG wrote: > >> I can never get logged into the damn thing. > > >> I wrote down the stupid CA####### account number and the password the > >> last time I did get in. EVERYTIME I want to use it I can not get back > >> in. > > >> If it weren't for that stupid account number and the password restriction > >> they impose, I might remember the damn access info without having to write > >> it down... great security that is, eh? > >> -- > >> VAXman- A Bored Certified VMS Kernel Mode Hacker VAXman(at)TMESIS(dot)COM > > >> "Well my son, life is like a beanstalk, isn't it?" > > >>http://tmesis.com/drat.html > > >Brian, > > >I believe that you can enter your email address and it will locate > >your account info (you do need to remember your password). > > I've asked it to send me the account number... nothing. > I just asked it to reset the password... nothing. > > I tried to re-register and it says I already have an account using > the email address I provided and it showed me the CA#######. Dumb! > > I have received no email from ITRC and there is no published human > contact information. > Does your browser have a "remember passwords for this site" option like Firefox does? I mean, ITRC isn't exactly like your bank where having a compromised password would cause you any major grief. If an impostor causes a problem, the moderators can easily remove the offending posts. ITRC forums have some problems, but as far as I'm concerned the login isn't one of them. Both username and password *are* case sensitive; username accepts either the CA# or your email address. Read the forums FAQ here: <http://forums1.itrc.hp.com/service/forums/helptips.do?#overview> Doug

In article <1187025314.389133.121990@x35g2000prf.googlegroups.com>, Doug Phillips <dphill46@netscape.net> writes: > > >On Aug 13, 11:19 am, VAXman- @SendSpamHere.ORG wrote: >> In article <1187021440.892936.133...@57g2000hsv.googlegroups.com>, Bob Gezelter <gezel...@rlgsc.com> writes: >> >> >> >> >> >> >On Aug 13, 11:42 am, VAXman- @SendSpamHere.ORG wrote: >> >> I can never get logged into the damn thing. >> >> >> I wrote down the stupid CA####### account number and the password the >> >> last time I did get in. EVERYTIME I want to use it I can not get back >> >> in. >> >> >> If it weren't for that stupid account number and the password restriction >> >> they impose, I might remember the damn access info without having to write >> >> it down... great security that is, eh? >> >> -- >> >> VAXman- A Bored Certified VMS Kernel Mode Hacker VAXman(at)TMESIS(dot)COM >> >> >> "Well my son, life is like a beanstalk, isn't it?" >> >> >>http://tmesis.com/drat.html >> >> >Brian, >> >> >I believe that you can enter your email address and it will locate >> >your account info (you do need to remember your password). >> >> I've asked it to send me the account number... nothing. >> I just asked it to reset the password... nothing. >> >> I tried to re-register and it says I already have an account using >> the email address I provided and it showed me the CA#######. Dumb! >> >> I have received no email from ITRC and there is no published human >> contact information. >> > >Does your browser have a "remember passwords for this site" option >like Firefox does? I mean, ITRC isn't exactly like your bank where >having a compromised password would cause you any major grief. If an >impostor causes a problem, the moderators can easily remove the >offending posts. Yes it does but I do _not_ store authentication information in my browser. >ITRC forums have some problems, but as far as I'm concerned the login >isn't one of them. Both username and password *are* case sensitive; >username accepts either the CA# or your email address. > >Read the forums FAQ here: ><http://forums1.itrc.hp.com/service/forums/helptips.do?#overview> After a couple of hours, I finally received a new password email. I guess that "standard email processing time" for HP is on the order of hours. I am used to a couple of seconds to minutes. -- VAXman- A Bored Certified VMS Kernel Mode Hacker VAXman(at)TMESIS(dot)COM "Well my son, life is like a beanstalk, isn't it?" http://tmesis.com/drat.html

On Aug 13, 1:15 pm, Doug Phillips <dphil...@netscape.net> wrote: > On Aug 13, 11:19 am, VAXman- @SendSpamHere.ORG wrote: > > > In article <1187021440.892936.133...@57g2000hsv.googlegroups.com>, Bob Gezelter <gezel...@rlgsc.com> writes: > > > >On Aug 13, 11:42 am, VAXman- @SendSpamHere.ORG wrote: > > >> I can never get logged into the damn thing. > > > >> I wrote down the stupid CA####### account number and the password the > > >> last time I did get in. EVERYTIME I want to use it I can not get back > > >> in. > > > >> If it weren't for that stupid account number and the password restriction > > >> they impose, I might remember the damn access info without having to write > > >> it down... great security that is, eh? > > >> -- > > >> VAXman- A Bored Certified VMS Kernel Mode Hacker VAXman(at)TMESIS(dot)COM > > > >> "Well my son, life is like a beanstalk, isn't it?" > > > >>http://tmesis.com/drat.html > > > >Brian, > > > >I believe that you can enter your email address and it will locate > > >your account info (you do need to remember your password). It takes over a day for this to happen. > > I've asked it to send me the account number... nothing. > > I just asked it to reset the password... nothing. > > > I tried to re-register and it says I already have an account using > > the email address I provided and it showed me the CA#######. Dumb! > > > I have received no email from ITRC and there is no published human > > contact information. > > Does your browser have a "remember passwords for this site" option > like Firefox does? I mean, ITRC isn't exactly like your bank where > having a compromised password would cause you any major grief. If an > impostor causes a problem, the moderators can easily remove the > offending posts. All the more reason not to be case-sensitive and complex! > ITRC forums have some problems, but as far as I'm concerned the login > isn't one of them. Both username and password *are* case sensitive; > username accepts either the CA# or your email address. Why do they make it case-sensitive and complex? When it comes to passwords, LONGER IS STRONGER. The prevailing wisdom favors requiring complex passwords, but they cause more pain than gain! There were a couple of articles in some IT publication making the case for longer vs. complex. I'll see if I can dig them up. OK, I dug it up (one of at least two on the topic)! http://www.infoworld.com/article/06/11/10/46OPsecadvise_1.html But it follows from the number of combinations being x^L where x is the number of characters in the character set and L is the length of the password. I think I posted here on this before in detail. I did: http://groups.google.com/group/comp.os.vms/browse_frm/thread/b748cffab9e85344/54d80e84e8dbee34?lnk=gst&q=complex+passwords+aef&rnum=7&hl=en#54d80e84e8dbee34 (apologies if it wraps unkindly) In brief, adding to the length greatly (exponentially!) increases the possible number of passwords and adding to the required character set less so, and even less than that due to the fact that most passwords will be only minimally complex (mostly lowercase letters) anyway. Ugh! > > Read the forums FAQ here: > <http://forums1.itrc.hp.com/service/forums/helptips.do?#overview> > > Doug AEF

On Aug 13, 12:31 pm, VAXman- @SendSpamHere.ORG wrote: > In article <1187025314.389133.121...@x35g2000prf.googlegroups.com>, Doug Phillips <dphil...@netscape.net> writes: > >On Aug 13, 11:19 am, VAXman- @SendSpamHere.ORG wrote: > >> In article <1187021440.892936.133...@57g2000hsv.googlegroups.com>, Bob Gezelter <gezel...@rlgsc.com> writes: > > >> >On Aug 13, 11:42 am, VAXman- @SendSpamHere.ORG wrote: > >> >> I can never get logged into the damn thing. > > >> >> I wrote down the stupid CA####### account number and the password the > >> >> last time I did get in. EVERYTIME I want to use it I can not get back > >> >> in. > > >> >> If it weren't for that stupid account number and the password restriction > >> >> they impose, I might remember the damn access info without having to write > >> >> it down... great security that is, eh? > >> >> -- > >> >> VAXman- A Bored Certified VMS Kernel Mode Hacker VAXman(at)TMESIS(dot)COM > > >> >> "Well my son, life is like a beanstalk, isn't it?" > > >> >>http://tmesis.com/drat.html > > >> >Brian, > > >> >I believe that you can enter your email address and it will locate > >> >your account info (you do need to remember your password). > > >> I've asked it to send me the account number... nothing. > >> I just asked it to reset the password... nothing. > > >> I tried to re-register and it says I already have an account using > >> the email address I provided and it showed me the CA#######. Dumb! > > >> I have received no email from ITRC and there is no published human > >> contact information. > > >Does your browser have a "remember passwords for this site" option > >like Firefox does? I mean, ITRC isn't exactly like your bank where > >having a compromised password would cause you any major grief. If an > >impostor causes a problem, the moderators can easily remove the > >offending posts. > > Yes it does but I do _not_ store authentication information in my browser. > I don't either for anything that has a financial or other important identity attached to it. I keep those pretty high-level and closely guarded. You'd need to either torture me or get into my safe-deposit box at the bank for those. And I'll recommend here that everyone should keep their important login/password list, along with a summary of need-to-know things about their computer(s), in their safety- deposit box or safe if they care anything at all about whoever they've named as executor of their estate! (Even if you think the estate is too small to worry about. You just can't appreciate the hassle unless you've been through it.) My Firefox allows me to be selective about stored passwords, and I don't use valuable and complex logins/passwords or even email addresses for casual sites. FF seems to be secure enough for those. With FF you can even "master password" protect viewing the stored passwords, too. I trust you (and a few others here) when it comes to matters of security, though, so what security ramifications do you see with storing casual logins? > >ITRC forums have some problems, but as far as I'm concerned the login > >isn't one of them. Both username and password *are* case sensitive; > >username accepts either the CA# or your email address. > > >Read the forums FAQ here: > ><http://forums1.itrc.hp.com/service/forums/helptips.do?#overview> > > After a couple of hours, I finally received a new password email. I guess > that "standard email processing time" for HP is on the order of hours. I > am used to a couple of seconds to minutes. > You've been spoiled;-) Speed and dependability aren't two of the ITRC forum site's pluses. Some of the ITRC moderators do look in here occasionally, though. Maybe someone saw your post.

On Aug 13, 1:06 pm, AEF <spamsink2...@yahoo.com> wrote: > On Aug 13, 1:15 pm, Doug Phillips <dphil...@netscape.net> wrote: > > > > > On Aug 13, 11:19 am, VAXman- @SendSpamHere.ORG wrote: > > > > In article <1187021440.892936.133...@57g2000hsv.googlegroups.com>, Bob Gezelter <gezel...@rlgsc.com> writes: > > > > >On Aug 13, 11:42 am, VAXman- @SendSpamHere.ORG wrote: > > > >> I can never get logged into the damn thing. > > > > >> I wrote down the stupid CA####### account number and the password the > > > >> last time I did get in. EVERYTIME I want to use it I can not get back > > > >> in. > > > > >> If it weren't for that stupid account number and the password restriction > > > >> they impose, I might remember the damn access info without having to write > > > >> it down... great security that is, eh? > > > >> -- > > > >> VAXman- A Bored Certified VMS Kernel Mode Hacker VAXman(at)TMESIS(dot)COM > > > > >> "Well my son, life is like a beanstalk, isn't it?" > > > > >>http://tmesis.com/drat.html > > > > >Brian, > > > > >I believe that you can enter your email address and it will locate > > > >your account info (you do need to remember your password). > > It takes over a day for this to happen. Oh, we mean you can *enter* the email address you've registered *instead of* the CA# when you login in where it says: "User ID or E- mail: [___] (case sensitive)"

In article <1187033035.453354.219190@m37g2000prh.googlegroups.com>, Doug Phillips <dphill46@netscape.net> writes: {...snip...} >I don't either for anything that has a financial or other important >identity attached to it. I keep those pretty high-level and closely >guarded. You'd need to either torture me or get into my safe-deposit >box at the bank for those. And I'll recommend here that everyone >should keep their important login/password list, along with a summary >of need-to-know things about their computer(s), in their safety- >deposit box or safe if they care anything at all about whoever they've >named as executor of their estate! (Even if you think the estate is >too small to worry about. You just can't appreciate the hassle unless >you've been through it.) ;) >My Firefox allows me to be selective about stored passwords, and I >don't use valuable and complex logins/passwords or even email >addresses for casual sites. FF seems to be secure enough for those. >With FF you can even "master password" protect viewing the stored >passwords, too. > >I trust you (and a few others here) when it comes to matters of >security, though, so what security ramifications do you see with >storing casual logins? I clear my browser out daily. No need for recent history information to be cluttering my cache. If I find a site that I think is import, I bookmark it. >You've been spoiled;-) > >Speed and dependability aren't two of the ITRC forum site's pluses. >Some of the ITRC moderators do look in here occasionally, though. >Maybe someone saw your post. I posted earlier today about the Advanced Server problem that I was a victim of this past weekend. I wanted to peruse the ITRC to see if there was any mention in there. Otherise, I find the ITRC forum too cumbersome to use. Besides, google seems to have a failry good index of comp.os.vms which I can easily focus in on with a search. I can't say the same about ITRC. -- VAXman- A Bored Certified VMS Kernel Mode Hacker VAXman(at)TMESIS(dot)COM "Well my son, life is like a beanstalk, isn't it?" http://tmesis.com/drat.html

On Aug 13, 3:30 pm, Doug Phillips <dphil...@netscape.net> wrote: > On Aug 13, 1:06 pm, AEF <spamsink2...@yahoo.com> wrote: > > > On Aug 13, 1:15 pm, Doug Phillips <dphil...@netscape.net> wrote: > > > > On Aug 13, 11:19 am, VAXman- @SendSpamHere.ORG wrote: > > > > > In article <1187021440.892936.133...@57g2000hsv.googlegroups.com>, Bob Gezelter <gezel...@rlgsc.com> writes: > > > > > >On Aug 13, 11:42 am, VAXman- @SendSpamHere.ORG wrote: > > > > >> I can never get logged into the damn thing. > > > > > >> I wrote down the stupid CA####### account number and the password the > > > > >> last time I did get in. EVERYTIME I want to use it I can not get back > > > > >> in. > > > > > >> If it weren't for that stupid account number and the password restriction > > > > >> they impose, I might remember the damn access info without having to write > > > > >> it down... great security that is, eh? > > > > >> -- > > > > >> VAXman- A Bored Certified VMS Kernel Mode Hacker VAXman(at)TMESIS(dot)COM > > > > > >> "Well my son, life is like a beanstalk, isn't it?" > > > > > >>http://tmesis.com/drat.html > > > > > >Brian, > > > > > >I believe that you can enter your email address and it will locate > > > > >your account info (you do need to remember your password). > > > It takes over a day for this to happen. > > Oh, we mean you can *enter* the email address you've registered > *instead of* the CA# when you login in where it says: "User ID or E- > mail: [___] (case sensitive)" Now he tells us!!! ;-) Are you saying the _email address_ is case sensitive??? I don't recall if I typed it in in upper or lowercase. AEF

On Aug 13, 4:55 pm, AEF <spamsink2...@yahoo.com> wrote: > On Aug 13, 3:30 pm, Doug Phillips <dphil...@netscape.net> wrote: > > > > > On Aug 13, 1:06 pm, AEF <spamsink2...@yahoo.com> wrote: > > > > On Aug 13, 1:15 pm, Doug Phillips <dphil...@netscape.net> wrote: > > > > > On Aug 13, 11:19 am, VAXman- @SendSpamHere.ORG wrote: > > > > > > In article <1187021440.892936.133...@57g2000hsv.googlegroups.com>, Bob Gezelter <gezel...@rlgsc.com> writes: > > > > > > >On Aug 13, 11:42 am, VAXman- @SendSpamHere.ORG wrote: > > > > > >> I can never get logged into the damn thing. > > > > > > >> I wrote down the stupid CA####### account number and the password the > > > > > >> last time I did get in. EVERYTIME I want to use it I can not get back > > > > > >> in. > > > > > > >> If it weren't for that stupid account number and the password restriction > > > > > >> they impose, I might remember the damn access info without having to write > > > > > >> it down... great security that is, eh? > > > > > >> -- > > > > > >> VAXman- A Bored Certified VMS Kernel Mode Hacker VAXman(at)TMESIS(dot)COM > > > > > > >> "Well my son, life is like a beanstalk, isn't it?" > > > > > > >>http://tmesis.com/drat.html > > > > > > >Brian, > > > > > > >I believe that you can enter your email address and it will locate > > > > > >your account info (you do need to remember your password). > > > > It takes over a day for this to happen. > > > Oh, we mean you can *enter* the email address you've registered > > *instead of* the CA# when you login in where it says: "User ID or E- > > mail: [___] (case sensitive)" > > Now he tells us!!! ;-) > > Are you saying the _email address_ is case sensitive??? I don't recall > if I typed it in in upper or lowercase. > Yes. I used upper-lower case (FirstLast) on mine back when I registered & it drove me crazy when I tried to log in after not having done so for a while. I finally fished-out my CA# from one of my old posts and logged in using that. Then I had one of those head-slapping moments. Hmmmm. I've had quite a few of those moments.... maybe that explains things!

In article <pz0wi.873$lz2.382@newsfe12.lga>, VAXman- @SendSpamHere.ORG wrote: [...] >After a couple of hours, I finally received a new password email. I guess >that "standard email processing time" for HP is on the order of hours. I >am used to a couple of seconds to minutes. To be fair, I sent an email last Thursday, and received a password within minutes. I needed to post a problem on ITRC, and after two days of back-and-forth (with a lot of very helpful suggestions) my problem was "resolved". I found my recent experience to be light-years' better than experiences I had at that site several years ago. I would have little hesitation posting questions or problems there in the future. [...]

On Aug 14, 3:06 am, Galen <gltack...@gmail.com> wrote: > > I've asked it to send me the account number... nothing. > > I just asked it to reset the password... nothing. > > Several times I've had a problem with the ITRC login telling me that > my password, which I hadn't changed in months, was invalid. I asked it > to reset the password. What I got via e-mail took me to a ITRC page to > enter a new password, but it wouldn't let me change the password to > anything else. I'd enter the old password, then enter the new password > twice for verification, and it would tell me that the old password was > invalid. Neither my "old" password (the one I had before the problem) > nor the "new" one from the e-mail was accepted. > > Each time I had to call HP support to get this fixed. The support > person would manually set my password to something I chose. Then I was > able to log in and change it again. They had no idea why this was > happening. > > It's been a few months since the last time this happened to me, so > it's probably due again soon. :-) There seems to be two sites which ITRC uses. One is the Americas/ Asia Pacific site and the other is the European site. Even though I am from the Americas/ Asia Pacific region it seemed to register me on the European site. I noticed this becuase I too, had many password problems using ITRC. If I use the Americas/ Asia Pacific it won't accept my password but on the European site it does. I can't understand why your username/ password would not be consistent across both sites.

VAXman- @SendSpamHere.ORG wrote: > I can never get logged into the damn thing. > > I wrote down the stupid CA####### account number and the password the > last time I did get in. EVERYTIME I want to use it I can not get back > in. > > If it weren't for that stupid account number and the password restriction > they impose, I might remember the damn access info without having to write > it down... great security that is, eh? Beware the Ides of ITRC! It suffers spontaneous and unexplained (not unexplainable) data loss ... http://groups.google.com/group/comp.os.vms/browse_thread/thread/96e5a8fa87e25246/ -- If it turns out that there is a God, I don't think that he's evil ... the worst that you can say about him is that basically He's an underachiever. [Woody Allen; Love and Death]