so you thought your computer was secure??

SnowSurfer · 08-21-2005, 07:11 PM

i did too, until i read "local password cracking presentation..."

http://www.irongeek.com/i.php?page=s...ingillustrated

i didn't realize how much stuff you could find out just by being able to log on to someone elses computer, the windows protected storage segment was very surprising...good read, there is some other good flash videos too

speedracer120 · 08-21-2005, 08:42 PM

The dude's voice reminds me of Edgar from 24.

Bires · 08-21-2005, 10:35 PM

I never thought my computer was secure.

Jeffbx · 08-22-2005, 05:45 AM

If you have physical access to a computer, you can get into it 99.999% of the time. In 99% of those cases, you can do it within a couple of minutes even if you don't have any passwords or logon IDs.

Security of your PC must begin with physical security - in other words, don't lose your laptop, and make sure no one has access to your PC if you have sensitive info on it.

Markel · 08-22-2005, 11:42 AM

Quote:

Originally Posted by Jeffbx

If you have physical access to a computer, you can get into it 99.999% of the time. In 99% of those cases, you can do it within a couple of minutes even if you don't have any passwords or logon IDs.

Security of your PC must begin with physical security - in other words, don't lose your laptop, and make sure no one has access to your PC if you have sensitive info on it.

I remember shortly after XP came out, it was discovered that you could boot from a Windows 2000 CD on an XP system, get into a dos prompt, and copy any files you wanted from the hard drive without leaving any trace of evidence (aside from the state of the PC if it was "locked" with XP running). I wonder if MS ever fixed this?

Jeffbx · 08-22-2005, 12:51 PM

I believe they did, but there are easier ways to get in. I have a nifty little utility on a floppy disk that you can boot from that will decrypt or reset the administrator password for you. Then you can just log right in & do what you want.

Or, the brute force way - just remove the HD & pop it into another machine for a quick peek.

SnowSurfer · 08-22-2005, 01:06 PM

the floppy program can corrupt files, i remember trying it on a school machine...for educational purposes..

Grimm · 08-22-2005, 01:55 PM

Any more you can just plug in a USB thumbdrive with Linux on it, reboot the PC, copy over whatever files you like. Or you can crack the passwords in a few minutes and log onto their PC in windows as the Admin.
You don't even have to carry a CD or floppy. Just a little key chain fob no one ever notices.

If you can touch a PC you can own it.

cocojambo · 08-24-2005, 01:38 AM

Quote:

Originally Posted by Bires

I never thought my computer was secure.

nor will our computers EVER be secured... hmm maybe Longhorn will fix many of the bugs in Windows

Jeffbx · 08-24-2005, 06:04 AM

Quote:

Originally Posted by cocojambo

nor will our computers EVER be secured... hmm maybe Longhorn will fix many of the bugs in Windows

Don't fool yourself there.... physical security of your machine is NOT an OS bug. It doesn't matter what OS is on there - if someone has physical access to your machine, they can get at your files eventually.

SnowSurfer · 08-24-2005, 06:29 AM

i actually dont have a floppy drive on my machine and i have it to only boot from the harddrive...i mean yes if someone was determined they could pull the motherboard battery and stuff but that takes time to get the lock off the case and what not

speedracer120 · 08-24-2005, 10:58 AM

You can't forget to disable boot from USB either.

Markel · 08-24-2005, 11:39 AM

Quote:

Originally Posted by Jeffbx

I have a nifty little utility on a floppy disk that you can boot from that will decrypt or reset the administrator password for you. Then you can just log right in & do what you want.

I've got a bootable CD with that and a bunch more nifty tools.

However, resetting the password means that your tracks are not quite invisible....

Jeffbx · 08-25-2005, 05:57 AM

Quote:

Originally Posted by Markel

I've got a bootable CD with that and a bunch more nifty tools.

However, resetting the password means that your tracks are not quite invisible....

Well, yeah... if you don't want anyone to know you've been there, there are other methods for that!

bachviet · 08-25-2005, 08:47 AM

Quote:

Originally Posted by Jeffbx

Well, yeah... if you don't want anyone to know you've been there, there are other methods for that!

After the work is done, use big magnet?

Jeffbx · 08-25-2005, 10:10 AM

Yes, that or the Big Hammer. Either one is effective at covering your tracks.

08-21-2005, 07:11 PM	#1
SnowSurfer Rear Admiral Lower Half Join Date: Jun 2002 Posts: 2,616	so you thought your computer was secure?? i did too, until i read "local password cracking presentation..." http://www.irongeek.com/i.php?page=s...ingillustrated i didn't realize how much stuff you could find out just by being able to log on to someone elses computer, the windows protected storage segment was very surprising...good read, there is some other good flash videos too __________________ I have an athlon xp 2500+ ... aren't you glad you know that?

08-21-2005, 08:42 PM	#2
speedracer120 Rear Admiral Upper Half Join Date: Mar 2000 Location: HB,CA/PA Posts: 3,437	The dude's voice reminds me of Edgar from 24. __________________ Off in La La Land

08-21-2005, 10:35 PM	#3
Bires Admiral Join Date: May 2000 Posts: 5,064	I never thought my computer was secure. __________________ Five years...

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

08-22-2005, 05:45 AM	#4
Jeffbx Fleet Admiral Join Date: Mar 2000 Location: Michigan Posts: 9,390	If you have physical access to a computer, you can get into it 99.999% of the time. In 99% of those cases, you can do it within a couple of minutes even if you don't have any passwords or logon IDs. Security of your PC must begin with physical security - in other words, don't lose your laptop, and make sure no one has access to your PC if you have sensitive info on it.

08-22-2005, 12:51 PM	#6
Jeffbx Fleet Admiral Join Date: Mar 2000 Location: Michigan Posts: 9,390	I believe they did, but there are easier ways to get in. I have a nifty little utility on a floppy disk that you can boot from that will decrypt or reset the administrator password for you. Then you can just log right in & do what you want. Or, the brute force way - just remove the HD & pop it into another machine for a quick peek.

08-22-2005, 01:06 PM	#7
SnowSurfer Rear Admiral Lower Half Join Date: Jun 2002 Posts: 2,616	the floppy program can corrupt files, i remember trying it on a school machine...for educational purposes..

08-22-2005, 01:55 PM	#8
Grimm 100% Pure Evil Join Date: Sep 2000 Posts: 7,861	Any more you can just plug in a USB thumbdrive with Linux on it, reboot the PC, copy over whatever files you like. Or you can crack the passwords in a few minutes and log onto their PC in windows as the Admin. You don't even have to carry a CD or floppy. Just a little key chain fob no one ever notices. If you can touch a PC you can own it.

08-24-2005, 06:29 AM	#11
SnowSurfer Rear Admiral Lower Half Join Date: Jun 2002 Posts: 2,616	i actually dont have a floppy drive on my machine and i have it to only boot from the harddrive...i mean yes if someone was determined they could pull the motherboard battery and stuff but that takes time to get the lock off the case and what not

08-24-2005, 10:58 AM	#12
speedracer120 Rear Admiral Upper Half Join Date: Mar 2000 Location: HB,CA/PA Posts: 3,437	You can't forget to disable boot from USB either.

08-25-2005, 10:10 AM	#16
Jeffbx Fleet Admiral Join Date: Mar 2000 Location: Michigan Posts: 9,390	Yes, that or the Big Hammer. Either one is effective at covering your tracks.

User Name
Password
Remember Me?