Re: The mother of all XP holes?, part II

From: Ken Wickes [MS] (kenwic@online.microsoft.com)
Date: 02/15/03


From: "Ken Wickes [MS]" <kenwic@online.microsoft.com>
Date: Fri, 14 Feb 2003 16:43:56 -0800


If a hacker has physical access to a machine then the data can be accessed
and no software can stand in the way. Encrypting files is probably the best
bet for protecting data at this point.

--
This posting is provided "AS IS" with no warranties, and confers no rights.
"Mark Guzowski" <mag@copper.nez> wrote in message
news:3e4d85c0_2@newsfeed...
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Re  : The mother of all XP holes?, part II
> Date: Feb 14 2003 18:51:39
>
> For what it's worth, I personally would imagine spyware is a worse
> security hole for most people (when compared with the win2k recovery
> console gotcha mentioned below).  Imho really ugly browser security
> holes can also be worse for most people...and which vendor doesn't
> have those?  In the twinkling of an eye, browser & spyware security
> holes could conceivably cause your prize data to be transferred across
> the globe.
>
> To be brutal, most people don't have enough patience/knowledge to make
> their systems really secure.  It can easily be argued that Microsoft
> (& others) provide the tools/foundational stuff, but it's up to the
> users to use those products in a way that makes them feel safe.
>
> I hope the following is obvious: Paying $100 or $200 for an OS doesn't
> buy you fort knox for your personal data, and assuredly Microsoft,
> Apple, and others never said it did.  The best implemented, most
> secure systems seem to never be truly 100% secure (new approaches are
> always being thought up to get at data, and it always seems something
> gets missed - which is part of the fun of building a secure system).
>
> > www.extremetech.com has a reference to a 'non-hack' which allows
> > anyone access to the administrative account in XP.  Gotta love holes
> > like that, especially given microsoft's supposed security focus.  If
> > you configure your machines just right (as mine are), your data would
> > still be safe & secure.
> >
> > Sun used to have some juicy back-door entrances too (for real).
>
> - -----
>
> Mark Guzowski
> mag@copper.net
> eZine/Homepage: http://groups.msn.com/magWorks
>
> This message has been digitally signed.  Authenticity can be verified
> upon request.
>
> A few of the words I live by: "Live life day to day, on your own terms
> (not someone else's).  Set your own moral compass, let it not be set
> for you.  Define your own self worth, let it not be defined for you.
> Your creativity (i.e., intellectual property) is yours to do with as
> you please; in absence of an explicit agreement to the contrary
> (signed by you) it is not for others to do with as they please."
>
> About the email content: This email reflects my opinions.  If the
> content offends, and you are a member of law enforcement (e.g., local
> police, fbi, nsa, or rcmp), first ask yourself if you have a legal
> wiretap.  If not, stop reading the email Ass.  Otherwise, chill out -
> they're only my opinions after all.
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGP 6.5.8ckt http://www.ipgpp.com/
>
> iQA/AwUBPk2EzdLK84BgYAPjEQJhPgCdGjHVETTYB7XOpz3oYuO4fEb3XqgAn22a
> h6J0995bRf16VuU41ReG9id0
> =sU2U
> -----END PGP SIGNATURE-----


Relevant Pages

  • Re: The mother of all XP holes?, part II
    ... If a hacker has physical access to a machine then the data can be accessed ... The mother of all XP holes?, ... Imho really ugly browser security ... > their systems really secure. ...
    (comp.security.misc)
  • Re: The mother of all XP holes?, part II
    ... One of the ten immutable laws of security ... If an attacker has physical access to your computer, ... The mother of all XP holes?, ... > their systems really secure. ...
    (comp.security.misc)
  • Re: The mother of all XP holes?, part II
    ... One of the ten immutable laws of security ... If an attacker has physical access to your computer, ... The mother of all XP holes?, ... > their systems really secure. ...
    (microsoft.public.security)
  • The mother of all XP holes?, part II
    ... The mother of all XP holes?, ... I personally would imagine spyware is a worse ... Imho really ugly browser security ... their systems really secure. ...
    (comp.security.misc)
  • The mother of all XP holes?, part II
    ... The mother of all XP holes?, ... I personally would imagine spyware is a worse ... Imho really ugly browser security ... their systems really secure. ...
    (microsoft.public.security)