Re: Article: Windows XP Wide Open Using Windows 2000 CD-ROM

From: Geoff Craig (GCraig@QUILOGY.COM)
Date: 02/20/03

  • Next message: Knouse, Jim: "Re: Article: Windows XP Wide Open Using Windows 2000 CD-ROM" 
    Date:         Thu, 20 Feb 2003 08:25:48 -0600
From: Geoff Craig <GCraig@QUILOGY.COM>
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

    Donovan,

    While this has been classified as an "embarrassing" security flaw by
    others and yourself, I will point everyone to the following URL.

    http://www.knopper.net/knoppix/index-en.html

    This is a utility called Knoppix which is a fully bootable Linux CD that
    is very easy to create, boot from and have complete access to an NTFS
    partition. Also, why go to this amount of trouble when I can use a
    utility like this one.

    http://home.eunet.no/~pnordahl/ntpasswd/bootdisk.html

    Boot the machine, change the admin password and not even bother with the
    time it takes to get the W2K CD up and going. Also, given the fact that
    most of the time people forget to extract the encrypted recovery agent's
    EFS key those EFS protected file aren't protected for long if I have the
    admininstrator's password and the ERA keys.

    While this may be considered an issue with some, I chalk it up to yet
    another utility I can use when I have unlimited physical access to a
    Windows machine. At that point the game is over anyway it's just a
    matter of what kind of knife I carve that turkey up with.

    oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
    Delivery co-sponsored by TruSecure Corporation
    oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
    TICSA - Anniversary Special - Limited Time

    Become TICSA certified for just $221.25 US when you register before 3/31/03
    with PROMO "TS0103" at www.2test.com. NO membership fees, certification
    good for 2 years. Price for international delivery just $296.25 US, with
    this offer. Offer cannot be combined with any other special and expires
    3/31/03. Visit www.trusecure.com/ticsa for full details.

    oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo