Re: Avoid Administrator password hacking ????

From: Matt Gibson (mattg_at_blueedgetech.ca)
Date: 07/06/05


Date: Wed, 6 Jul 2005 09:16:44 -0700


"John" <john.veldhuisSTOPSPAM@universal.nl> wrote in message
news:42cb8439$0$935$6c56d894@diablo.nl.easynet.net...
> Robert Moir wrote:
>
> > If I can
>> touch the machine physcially, and I'm determined to get in, I own the
>> machine. End of story.
>
> Wrong. That's why full disk encryption products are becoming so popular
> these days. See alt.security.scramdisk for discussions about such
> products.

Not wrong.

I sneak into the building one night, put a hardware keylogger on the
keyboard, then sneak out.

Next evening, I come in, and access the hardware keylogger, and I've now got
the password for the disc encryption.

Physical Access trumps all.

Matt Gibson - GSEC


Quantcast