Re: Protecting the Operating System

"Borked Pseudo Mailed" <nobody@xxxxxxxxxxxxxxxxx> wrote in message news:7ce0819d43bf42c9a2ed17011290f0a0@xxxxxxxxxxxxxxxxxxxx
Sebastian Gottschalk wrote:

No, you really don't get it.

Don't think so? Here's how the OP started this thread...

"I have just come to the conclusion that the only way to protect the
machine with free physical access is..."

If you're having trouble with the meaning of "free physical access"
bitch at whatever third world educational system it was that let you
remain functionally illiterate, and spend half your monthly McDonald's
wages on a pocket dictionary.

Is that clear enough for ya' there skippy?

<snip juvenile reiteration of the obvious, but irrelevant>



God forbid the OP just gets a padlock to secure the case and use BIOS password. Would be pretty obvious upon return when the case was smashed apart. You could use lock-down plates (to prevent the case from walking off) and disk locks (where the plate goes over all externally accessible drives to prevent their use providing you even bothered to provide them). If they can't take it or get inside, they can't modify the BIOS settings to disable the password, to reenable the disabled IDE ports to those CD/DVD drives or floppy, or reenable the disables USB, firewire, eSATA, COM, or other ports.

You don't even have to provide physical access to the system unit. Put it away where it is physically secure and let the users only get to the keyboard, mouse, and monitor. The drives are all locked up along with the case. Those users would still have free physical access to the I/O devices that they need and not to everything else. Just how to physically protect the computer depends on WHAT type of computer you are asking about. The OP merely said "the machine". Well, that doesn't say if it's a laptop, desktop, rackmount, or what.


.