AN ARTICLE on a web site claims that Windows XP has a flaw that allows people to hack into PCs just using a Windows 2000CD. The article, on Brian's Buzz on Windows, claims that when you start the Windows 2000 CD on an XP machine, you can start the W2K recovery console.

That then allows you to operate as an administrator, even without a password, and look at any other user accounts on the XP machine. You can also copy files from a machine's hard drive to other removable media, the site claims.

The fix? Use a physical lock on the PC.

Read More
News Source

Windows 2000, of course, doesn't allow Recovery Console users to access a hard drive without a password, if one previously existed.

If someone says: "If a bad guy has unrestricted physical access to your computer, it's not your computer anymore." That's all well and good - but the fact remains that Windows 2000 doesn't allow anyone with an old CD to get password-free access, and Windows XP does.

So it is XP's fault! :o