Print this article  |  E-mail this article  |  Comment on this article

Microsoft's Private Folder App Criticized

By Ed Oswald, BetaNews

July 10, 2006, 5:05 PM

Microsoft has released an application that would make it possible for those who share a PC or account to store files in a separate folder that only they may access. The move has been criticized, however, as some say the program could be misused, hiding content from IT administrators.

The software is called Private Folder 1.0, and hides data from the hard drive in addition to protecting it with a password. While no support will be given for the product, it will be available to those who verify their software as genuine through Microsoft's Windows Genuine Advantage Program.

But response to Private Folder from some was not positive. "An alleged security app that's easily circumvented and completely unsupported, with absolutely no documentation? Oh, dear. With all due respect, who the heck came up with this and why?" a user named "Drew" posted to the MSBlog on Monday.

Additionally, if a user loses the password to the folder, there is no way for Microsoft --or an administrator -- to unlock the files to regain access, something that many of the application's detractors found problematic.

Developer Greg Duncan said in his personal blog the fact that anyone could use this application troubled him. "As a parent I don't want anything on any PC in the house my son uses to be hidden from review," he said. Acknowledging that some may criticize his tough stand, he said "I know all to well the dark side of the Net."

Those looking to try out Private Folder 1.0 can download it from FileForum.

Add a Comment (63 Comments)

BetaNews reserves the right to remove any comment at any time for any reason. Please keep your responses appropriate and on topic. Foul language and personal attacks will not be tolerated.

Name (required):

E-mail (required):

Enter Your Comment:

By zaaraveer

posted Nov 4, 2006 - 6:56 AM

good

Score: 0

By FRANKYJ

edited Sep 23, 2006 - 11:18 AM

Hi, I dont know why someone will come up with the idea of that software,i installed this software on my notebook computer because my friends use my computer at home and they access my files and some personal folders, mistakenly i added my hard drive to the folders that i locked,right now when i put on my system, nothing comes up except my destop background, i am suspecting that the software has locked my drive:C,and it can no longer function. Please can anyone out there help me with an idea or solution to this problem because i cant do anything on my computer.

Score: 0

By Serg Zubatov

posted Jul 16, 2006 - 2:07 PM

Well, in addition to prohibit PrivateFolder I'd suggest strip-searching all empliyees before they leave the company premises. After all, they might have written over lunch a personal letter on the company paper using company pen and company table while sittin on the company chair and than hided it in their @$$es. And that, I believe is like stealing from the company. Actually, it's even more stealing than hiding some personal information on the company hard drive since company would certainly have to buy additional paper and pens to replace wasted while it's highly unlikely any employee would ever ask to buy him the second hard drive 'cause he already filled the first one with por… er… personal files.

Score: 0

By SkiBum

edited Jul 11, 2006 - 8:05 PM

So delete the files. A parent can say "Oh well!" If you are an administrator, on the other hand, make a backup copy first! When your user complains, tell her you'll give her data back unencrypted (of course that requires you to obtain the password from her).

But, as far as that goes, why bother with the MS toy? There are free programs that do a better job. Take for instance TrueCrypt (http://www.truecrypt.org/). No installation is needed (though it appears as it is required). It provides an incrediby strong encryption algorithm (tripple-pass AES-256, twofish, and Serpent which I doubt will be compromised anytime soon!). Finally, it can be hidden the easy way, no file extension.

Bottom line, there is no way to keep these encrypted files off your computer without severely limiting the functionality of your PCs by allowing only certain executable to run, at which point somebody will eventually put the functionality in a library for use with rundll. :-)

There is always a way around, so lets just let them have their easy way out that we, as admins, can circumvent if needs be!

Score: 0

By wincement

posted Jul 12, 2006 - 12:19 AM

No installation is needed

It's true that the program does not need to be installed, but in order to access an encrypted volume, the truecrypt driver *must* be installed.

Score: 0

By SkiBum

posted Jul 12, 2006 - 2:08 AM

Which happens on first invocation. I stand corrected. You must have administrative privelages. I had to boot to a rescue CD to rip it out of the registry to test properly. That doesn't change my opinion as far as the capabilities of the program, but it definately shot a big'ol hole in my argument! That is a good thing for the sysadmins.

Score: 0

By wincement

posted Jul 12, 2006 - 10:51 AM

That is a good thing for the sysadmins.

Yup, I agree. In fact, I think it makes me like the program even more.

Although sometimes (rarely) I wish I didn't have to have admin privileges to use it.

Bottom line is: Truecrypt owns. =)

Score: 0

By caywen

edited Jul 11, 2006 - 11:41 AM

I don't understand - someone says that it's easily circumvented, yet also says that there's no way to recover the data if the password is lost. Isn't that a contradiction?

I do completely agree with those concerned about the dark side of the net wrt kids. MS really should allow the admin to get to the folder.

Score: 0

By davidtb

posted Jul 11, 2006 - 9:19 AM

Sounds neat..who'd they steal it from?

Score: 0

By THZGryphon

posted Jul 11, 2006 - 12:37 PM

omgrofl you are funny! Can't breath...laughing too hard at you!

Score: 0

By GoodThings2Life

posted Jul 11, 2006 - 8:31 AM

LMAO @ a program called "PRIVATE FOLDER" be misused to "HIDE CONTENT"... no, seriously, that's hilarious.

It sounds like fearing such a thing would defeat the purpose of having it.

If you're the type who distrusts your fellow users.... why give them access to do such things in the first place? Deny them access to the computer outright, or supervise their use if it's kids, or any number of other solutions.

This isn't news.... this is just something for people to whine about.

Score: 0

By sophist_dreams

edited Jul 11, 2006 - 1:09 PM

I am with you, if people are so damned worried about their kids, or whoever, hiding things on the computers why even bother to install it?

Score: 0

By wincement

posted Jul 11, 2006 - 12:42 PM

Thank you.

I was just about to post the same thing.

Score: 0

By tscar12

posted Jul 11, 2006 - 7:44 AM

I don't see why people are making a big deal about this. There are other programs that do the same thing. As far as support and documentation, my gut feeling is that this is a beta and may be a part of Vista. If i am right then there will be support. As far as forgetting your password, you can password protect any document now and if you forget your password, there are programs that can bring up all your passwords. so, again, no big deal.

Score: 0

By templar™

posted Jul 11, 2006 - 6:31 AM

Another example of double standard applied to MS. When others do it, it's all good and wonderful. When MS does it, it's bad and "could be misused."

Score: 0

By xyzcb1

posted Jul 11, 2006 - 9:41 AM

Yeap. Just like when MS releases some updates or SP, people will says the OS is full of holes, but when Apple releases updates or SP, they thanks Apple for the hardwork.

Score: 0

By templar™

posted Jul 11, 2006 - 11:36 AM

Exactly!

Score: 0

By RejZoR

posted Jul 11, 2006 - 5:31 AM

[Sarcasm ON]It's a real rocket science to operate this program.[Sarcasm OFF]

C'mon, brain dead amoeba could get this program running, why couldn't anyone else without a single documentation? Plus if you ever used FolderLock or similar tool you'll feel just like at home.
I find this tool pretty useful for my sensitive data (no, it's not pr0n ;) )
Maybe it lacks certain features like ability to create several such folders on different locations but in general it's pretty nice.

Score: 0

By dingomutt

posted Jul 11, 2006 - 11:11 AM

No really. When did any men ever start reading manuals??

Score: 0

By Silentmaster101

posted Jul 11, 2006 - 1:30 PM

and when did women ever stop telling men what they "think" they read in the manual?

Score: 0

By hardgiant

posted Jul 11, 2006 - 3:45 AM

TrueCrypt: http://www.truecrypt.org/

Much better.

Score: 0

By wincement

posted Jul 11, 2006 - 12:43 PM

Agreed.

Score: 0

By M1M2Z1

posted Jul 11, 2006 - 8:12 AM

Too cool.
Thanks for sharing.

Score: 0

By Silentmaster101

posted Jul 11, 2006 - 3:42 PM

if you configure it correct you are even supposed to be able to encrypt the bootsector, but from what i read it has to be before installing the os, so im not sure how you load it on...

Score: 0

By Esquire

edited Jul 11, 2006 - 3:11 AM

"I know all to well the dark side of the Net"

Does he mean he knows it all TOO well or does he mean he too drinks from that same well (so to speak)?

Honestly, it's blown out of proportion. It's just a simple tool to keep files from other users of the same computer - just click on the folder, enter the password when prompted and instantly have access to your porn.... I mean files!!

Don't install it if you don't want it. Just don't expect any simple tool to be more than that at the same time.

Score: 0

By myk04l

posted Jul 11, 2006 - 2:45 AM

"I know all to well the dark side of the Net."
lmao hide your 20gig stash of "private videos"

Score: 0

By spiked

posted Jul 11, 2006 - 1:16 AM

October 2001: Windows XP ships with built-in zipping, including optional password. Right-click on a file, choose Send To > Compressed Folders, then specify a password. It's not heavily documented (hence all the people who install WinZip on XP and click "I Agree" several times a day because they think they have to have it but won't license it), and zip passwords are "easily circumvented" by brute-force attacks because people rarely choose strong passwords unless forced.

So how is the situation with Private Folders any different? Personally, I don't find it to be a useful tool, but I also don't see anything wrong with its existence.

Score: 0

By comwedge

edited Jul 10, 2006 - 11:33 PM

Taking the focus away from Greg for a moment. The product itself is something that should be seriously scrutinized we all know Microsoft's support for its products are both costly and inadequate however "no documentation?!?" it is quite likely the folks at Redmond have built in a back door. Get the Swedish hackers who hacked hotmail onto it! Seriously as a former Microsoft employee there are always better programs out there that's why there is a whole team devoted to finding other peoples software and making a Microcrap version, oops did I say that out loud? Next thing you know Microsoft will put a hit out on me and George Bush will have said I deserved it!

Score: 0

By The MAZZTer

posted Jul 10, 2006 - 9:51 PM

'Developer Greg Duncan said in his personal blog the fact that anyone could use this application troubled him. "As a parent I don't want anything on any PC in the house my son uses to be hidden from review," he said. Acknowledging that some may criticize his tough stand, he said "I know all to well the dark side of the Net."'

So if you see Private Folder on there then uninstall it...

Even better, make your son a Limited User account so he can't install stuff in the first place.

Score: 0

By Corbit

posted Jul 10, 2006 - 9:58 PM

I think Greg is the Limited User in that family . . .

Score: 0

By daq

posted Jul 10, 2006 - 11:54 PM

lol. Great comment!

Score: 0

By alexsch8

posted Jul 10, 2006 - 10:01 PM

LOL... that actually made me bust out laughing!!!

Score: 0

By Corbit

posted Jul 10, 2006 - 9:45 PM

"I know all to well the dark side of the Net," said Duncan, whose various online persona include Ginnykin Girliskirts and Darth Grope.

Score: 0

By spongy-poo

posted Jul 10, 2006 - 9:35 PM

"I know all to well the dark side of the Net."

Now, there's no need to talk about BetaNews like that.

Score: 0

By KSzostek

posted Jul 10, 2006 - 9:17 PM

It is great. Long over due.

Score: 0

By jackamus

posted Jul 10, 2006 - 7:44 PM

Love it!!

Score: 0

By horsecharles

edited Jul 10, 2006 - 7:40 PM

Direct, no-hassle download link: http://download.microsof...dc2c3c265/MSPF10ENU.msi

Score: 0

By dejavu

posted Jul 10, 2006 - 7:17 PM

It Was Very Useful For Me!

Score: 0

By horsecharles

edited Jul 10, 2006 - 7:46 PM

Those looking to try out Private Folder 1.0 can download it from FileForum.

Is an incorrect statement: it redirects to MS, who does not allow any OS except for winXP(no other nt OS)to download.

I highly suggest you find a way to host it, this being a review & opinion site!!!

Score: 0

By wincement

edited Jul 11, 2006 - 12:48 PM

Isn't it part of the Genuine Advantage category of software?

It would be illegal to host it elsewhere.

Score: 0

By The MAZZTer

posted Jul 10, 2006 - 9:50 PM

That would be because it only WORKS on Windows XP.

Score: 0

By horsecharles

posted Jul 10, 2006 - 10:30 PM

Betcha a way is found to make it work on other OS.....

Score: 0

By UTAKER

posted Jul 10, 2006 - 6:38 PM

if you dont like it, then dont let it be installed, noone is forcing you, its only for those who want privacy and THAT IS IT

Score: 0

By rodtrent

posted Jul 10, 2006 - 6:32 PM

New headline: "Microsoft, today, released a new application to secure pornography"

Score: 0

By Grazer

posted Jul 10, 2006 - 6:59 PM

Nah, thumbnails take to long to render from encrypted files ;)

Score: 0

By dudigd

edited Jul 15, 2006 - 7:09 AM

thumbnails view of a folder with too many objects brings up BSOD. Stop message indicates problems with prvfldr.sys
has anyone else experienced this?

Score: 0

By Mandeep

posted Jul 10, 2006 - 5:51 PM

who cares what Greg Duncan says. thats like writing an article about a new hard drive technology with Actor Arnold Schwarzenegger said in his personal blog that he doesn't like the new technology.

Score: 0

By DigitAl56K

posted Jul 10, 2006 - 5:44 PM

"An alleged security app that's easily circumvented"

"Additionally, if a user loses the password to the folder, there is no way for Microsoft --or an administrator -- to unlock the files to regain access"

Would anyone from BetaNews care to reconcile these two statements?

Score: 0

By wincement

posted Jul 11, 2006 - 3:33 PM

I'm stumped as well.

Maybe "easily circumvented" means you can enter your password to access the files?

Well that's just not secure at all...

Score: 0

By asellus

posted Jul 10, 2006 - 10:38 PM

Not easily circumvented really, unless brute-force attack count as one.

Score: 0

By Corbit

posted Jul 10, 2006 - 9:52 PM

Irreconcilable, methinks.

Score: 0

By mjm01010101

posted Jul 10, 2006 - 6:58 PM

I agree. A tad bit of clarification is needed here.

Score: 0

By Toosi

edited Jul 10, 2006 - 6:52 PM

How would anyone trust a security application in the first place if Microsoft created backdoors, so administrators could recover lost passwords for n00bs.

If you forget your password, your files should be gone...

Score: 0

By Silentmaster101

posted Jul 11, 2006 - 2:02 PM

well i guess anyone who uses this program should be smart enough to remember their password now shouldnt they?

Score: 0

By Grazer

posted Jul 10, 2006 - 6:01 PM

Not good enough to keep hackers out, just good enough to keep IT personnel out. :P

Score: 0

By Serg Zubatov

edited Jul 16, 2006 - 1:52 PM

:-)

Score: 0

By Babylon2x

posted Jul 10, 2006 - 5:24 PM

"The move has been criticized, however, as some say the program could be misused, hiding content from IT administrators."

Isn't it there job to stop things like that being installed on computers, like why they don't give people admin accounts? :)

Doesn't seem any different than something like TrueCrypt which can use an encrypted file as a "Hard Drive". The data is encrypted/decypted on the fly.

The criticism stated in this article seems to come mostly from ignorant computer users. This tool isn't anything new, all the complaints and 'worries' existed before it.

Score: 0

By Silentmaster101

posted Jul 11, 2006 - 2:05 PM

any admin who lets their users install programs like that deserves to have content hidden from them. And in all reality, without licensing some expensive software to detect software changes and where new files are created, its not like a standard admin has the time or luck to go searching through all the folders on a hard drive looking for illegal stuff...

Score: 0

By Grazer

posted Jul 10, 2006 - 5:22 PM

As a parent I don't want anything on any PC in the house my son uses to be hidden from review
Chances are, if his son is old enough to want to hide stuff, he already has. How much different than a zero compression, password protected rar file is this?

Score: 0

By deadmonkey

posted Jul 10, 2006 - 6:12 PM

It isn't any different. There are already freeware tools which do the same. Personally I would recommend TrueCrypt or GPG over this product. As far as I know it does not even state which encryption algorithm(s) it uses although I would hope it uses AES.

Score: 0

By Paradise-FH-

posted Jul 10, 2006 - 5:24 PM

it's put out by microsoft instead of rarlabs.

:rolleyes:

Score: 0

By deadhippo

edited Jul 16, 2006 - 11:19 PM

Sounds like a cool peice of sofware.

Score: 0

By sam123456

edited Aug 3, 2006 - 12:44 PM

A private folder with a lot of images and thumbnail view will crash your computer when using MS Private Folder

Score: 0

Sep 5 - 8:44 PM ET Mozilla's Aza Raskin: The journey back to Ubiquity

Sep 5 - 7:10 PM ET Red Hat buys virtualization specialist Qumranet

Sep 5 - 7:06 PM ET Analysts: Online news viewers rising as newspaper readership falls

Sep 5 - 6:55 PM ET Where does Sarah Palin stand on technology issues?

Sep 5 - 6:51 PM ET Adobe Flash to deliver NFL games in full

Sep 5 - 4:29 PM ET Exclusive beta invitation from GameTap and BetaNews

Sep 5 - 4:09 PM ET Report: OLPC buy one, give one deal returns

Sep 5 - 3:45 PM ET No ruling yet in TiVo vs. EchoStar patent case

Sep 5 - 3:37 PM ET Google Analytics starts tracking Chrome, with intriguing results

Sep 5 - 2:14 PM ET Comcast challenges FCC's authority in sanction appeal