Re: Viewing NTFS files using a Knoppix CD - Need to know why this is p

From: Mike Brannigan [MSFT] (mikebran_at_online.microsoft.com)
Date: 11/18/04 

Date: Thu, 18 Nov 2004 09:47:33 -0000

Yes but as per my post on this subject even with access you can prevent
access to the data itself (subject to availability of serious hardware to
break it) using technologies such as EFS. 

-- 
Regards,
Mike
--
Mike Brannigan [Microsoft]
This posting is provided "AS IS" with no warranties, and confers no
rights
Please note I cannot respond to e-mailed questions, please use these
newsgroups
"Malke" <malke@nospoonnotreally.com> wrote in message 
news:%23QI6rTSzEHA.3840@tk2msftngp13.phx.gbl...
> Colin Nash [MVP] wrote:
>
>>
>> "LucGallant" <LucGallant@discussions.microsoft.com> wrote in message
>> news:A5376660-3D71-4103-9127-12D8000F907F@microsoft.com...
>>> Hello Everyone,
>>>
>>> this question is geared towards someone who understands how the NTFS
>>> file system and the linux file system work. My question is: I have a
>>> computer running Windows XP with an NTFS file system. So, this file
>>> system is secure,
>>> right?
>>>
>>> Now, when I use a Knoppix CD (basically a version of linux that runs
>>> off the
>>> CD),  in this computer, I am able to see the NTFS drive _AND_ access
>>> all of
>>> the files on it. According to me, this is absolute nonsense, because
>>> this means that anyone who wants access to my files doesn't even need
>>> to log in,
>>> and can simply boot with knoppix and see all that I have. If someone
>>> could clarify why this is possible and if there is any way to protect
>>> myself, it would be greatly appreciated.
>>>
>>> Luc
>>
>> Someone can also install a second instance of Windows, or stick the
>> hard
>> drive into another system that they have admin rights to.  NTFS
>> permissions are only respected as long as the currently loaded OS
>> feels like enforcing
>> them.  This 'weakness' is not limited to Microsoft... same thing can
>> be done to a Linux ext3 volume, for example.
>
> Yes, and just to emphasize that this is not an operating system issue -
> anyone with physical access to my Linux computers could boot to a
> rescue disk or distro boot disk. It doesn't even have anything to do
> with ext2, ext3, Reiser, or whatever. There are a few things you can do
> to minimize the security hole, such as set the machine to only boot
> from the hard drive and set passwords in the BIOS, but the bottom line
> is that anyone with physical access and the required skill (and time)
> can get into a computer. This fact has nothing to do with the operating
> system installed on the hypothetical computer.
>
> Malke
> -- 
> MS-MVP Windows User/Shell
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic"
Quantcast