LinkBack URL
About LinkBackshttp://www.hackmac.org/?q=node/4
Does this work? If so.. ouch!
Lights blue touchpaper and retires to safe distance..
http://www.hackmac.org/?q=node/4
Does this work? If so.. ouch!
Lights blue touchpaper and retires to safe distance..
Crosshair VIII Hero (WIFI), 3900x, 32GB DDR4, Many SSDs, EVGA FTW3 3090, Ethoo 719
That's funny, that feature wasn't there in FreeBSD, I wonder how that got in there.
Originally Posted by Agent
It was bunged in by the aliens as revenge for the "upload virus" thing...
of course, simply typing "passwd $USERNAME" once you're into a root console would be *far* too complex. no, you have to delete random files & load the first-run wizard. obviously.
What, that you can get into a machine for access if you have physical access, reboot it in single user mode and do something. Gasp. What next.
And as someone else said, what's wrong with just resetting the password using the passwd command.
My sarcasm-o-meter is ringing from those last two posts
Crosshair VIII Hero (WIFI), 3900x, 32GB DDR4, Many SSDs, EVGA FTW3 3090, Ethoo 719
i think the complaint is that there is this menu out of the box.
Take RISC OS for instance, this had a key sequence which would re-set everything to default state (like re-installing the OS, remeber RISC OS was mostly ROM based at this time).
But the little user restriction apps that sat on the top, as in secure as they where, would still not be bypassed by this. I think this is a bit silly desgin wise.
throw new ArgumentException (String, String, Exception)
there are very good reasons to access single-user mode
not having it there would guarantee you needed it
So the guy reckons that being able to do that AS ROOT is a security issue?
Oh dear.
PHP Code:$s = new signature();
$s->sarcasm()->intellect()->font('Courier New')->display();
No, the part where you can escalate to root privileges simply by rebooting into single usermode, is the security issue, from there the world is your oyster.
not disputing that for a second, just that there should be some primative security around it (think not having cd/usb in the boot order, or password protecting the single-user mode, that might be an idea now!)
absolutely, its a case of user friendlyness vrs security.
throw new ArgumentException (String, String, Exception)
The obvious one is to password protect the boot options (as you can in Grub). Of course that is of little use unless you password protect the bios boot options, which of course is of little use if the hacker can gain access to the mobo. He who physically controls the computer potentially has access to all that is stored on it (unless you employ file/disk encryption)
(\__/)
(='.'=)
(")_(")
Been helped or just 'Like' a post? Use the Thanks button!
My broadband speed - 750 Meganibbles/minute
If you have physical access to the machine you're interested in, the world is already your oyster.
The concern for me is not the security of such a system, rather the damage an unsavvy user could unwittingly cause.
PHP Code:$s = new signature();
$s->sarcasm()->intellect()->font('Courier New')->display();
Or use TPM like on my toshiba tablet PC here! (because i was worried it would get nicked on campus, and people would know all my dirty little secrets..... dull as they are)
I find it intresting how apple fail to do so many useful things they can on their priopretry platform!
throw new ArgumentException (String, String, Exception)
If you've got physical access, couldn't you just whip out the HDD and slave it to another Mac? Then it wouldn't leave any traces!
EDIT: 1,000 posts wooooot! Ooo I feel old...
AMD 3700+ San Diego @ 2.8GHz| Zalman CNPS 9500LED + Arctic Cooling MX-1 | Asus A8N-SLi Deluxe + Zalman Northbridge | 1024MB DDR RAM (2 x 512MB Corsair XMS Pro TwinX) | Leadtek nVidia 6600GT 128MB | Creative SoundBlaster X-Fi Xtreme Music | 2x80GB Hitachi Deskstar SATA-II (RAID 0) | Gigabyte 3D Aurora Case | Hiper Type-R 580W Modular | Enermax Ultimate Fan Controller| Microsoft Nautral 4000 | Logitech G5 + fUnc 1030| Ideazon Fang | SpeedLink Medusa 5.1 Surround Headset | Samsung SM913N 19" TFT | Compro DVB-T200
"Dell? You get better tech support with a cheese sandwich"
But do you trust your TPM?
PHP Code:$s = new signature();
$s->sarcasm()->intellect()->font('Courier New')->display();
There are currently 1 users browsing this thread. (0 members and 1 guests)
Posting Permissions
Reply With Quote
