BetaONE will rise again!


Reply
  #1  
Old 17th Feb 03, 04:20 PM
~*McoreD*~'s Avatar
~*McoreD*~ ~*McoreD*~ is offline
Super Moderator
 
Join Date: Jul 2002
Location: Australia
Posts: 2,902
~*McoreD*~ is an unknown quantity at this point
Yesterday's article about a Windows XP vulnerability brought a bumper post bag. It seems that Windows XP hacks might be used in plenty of places already...
How lame can you guys get in running this story this way instead of bashing the stupidity of the first story?

It's not true that you cannot do this if the CD did ask for a password. And it's also not true that you cannot do this with 2K and an install CD. It's trivial to get around the same thing in 2K also. Here is one simple way - just install another parallel install of 2K and boot into that as Admin, then you have access to all un-encrypted files on the other install. So the CD protection is nothing at all (whether 2K or XP).

Most likely MS realised how futile all this was and made the XP CD simpler to do troubleshooting. So how is this an XP specific issue? I hope you realise all this and put it across in the right way in your story. If you have physical access to a machine there is only one proven way to protect data (encrypt files) and XP/2K makes that trivial to do using Properties->Advanced->Encrypt contents ... That uses public key cryptography and as long as you protect and save your key no one can easily steal your data (try seeing how easy it is to do something like that in Linux). No matter what whiz bang OS you have, your data can be stolen with physical access to your machine unless you encrypt files.

Read More
News Source
Reply With Quote
  #2  
Old 11th Mar 03, 07:00 AM
skloo77 skloo77 is offline
Senior Member
 
Join Date: May 2002
Posts: 485
skloo77
Send a message via ICQ to skloo77 Send a message via MSN to skloo77
regarding the reinstalling of the 2K OS and log in as Admin to gain access to the files.

there is another way to log in as Admin but without the hassle to reinstall 2K.

winnt\system32\config
look for the SAM file and rename it to any name that you can remember.

restart the pc and log in as Admin without password.
bingo.....
(but, the previous profiles that were created will not be available anymore).

but i would like to know if this method can also gain access to the files?
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT +1. The time now is 06:10 AM.


Design by Vjacheslav Trushkin for phpBBStyles.com.
Powered by vBulletin® Version 3.6.5
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.