XP Security Flaw

  • Thread starter Thread starter sinner man
  • Start date Start date
S

sinner man

Has MS sent out a fix for the flaw whereby one can access a
password-protected XP system
by using a Win2000 CD ?
 
A cursory KB search doesn't reveal anything, but I didn't
look that hard.

Why is this such a problem? Using a Win2000 CD requires
physical access to the machine.
If your files aren't encrypted, and someone has physical
access to the machine, they can do whatever they want.

They can just install another OS, take ownership of the
files, and boom.

If they are encrypted, they won't be able to decrypt them
with a Win2000 CD.

So my question is - why does this matter to you so much?
 
Shouldn't the system (OS) itself be made secure against entry ? Is this
too much to ask ?
Just wondering why MS is taking so long to fix this after touting XP as the
end-all in OS security.
 
All I use is a FLOPPY to reset Admin password. Why even bother with Win2000
CD? Hardware security is a must.
 
Greetings --

That's not really a security flaw. If you don't have physical
security to start with, there are no other security measures that are
much good.

Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
There is no way that software can make up for lack of physical security. If
the bad guys can get physical access to your computer, it's not your
computer anymore.
 
nogo said:
Shouldn't the system (OS) itself be made secure against entry ? Is this
too much to ask ?
Just wondering why MS is taking so long to fix this after touting XP as the
end-all in OS security.
Click to expand...

You would need to boot the Win2000 CD - or some other bootable device.
So set the BIOS to boot Hard drive before CD (and preferably without CD
or floppy involved at all - only possible on some BIOSes) and then set
a password for access to the BIOS. To get round that would imply
getting into the case and using the jumper to clear the CMOS; and if
someone knows enough to do that he knows enough to use a screwdriver and
steal the drive.
 
Back
Top