View Single Post
  #6 (permalink)  
Old 02-27-2007
Malke
 

Posts: n/a
Re: login in Windows Vista without any credential
alun@texis.invalid wrote:
> "Malke" <notreally@invalid.invalid> wrote in message
> news:%23dvwTEnWHHA.5108@TK2MSFTNGP06.phx.gbl...
>> Yes, it always amuses me when people are "outraged" that Windows can be
>> accessed by booting with other operating systems, etc. As you have so well
>> explained, *any* computer running *any* operating system is vulnerable if
>> there is physical access by a skilled person with a bit of time and a few
>> tools. I can get into my Linux and OS X systems, too.

>
>
> Although...
>
> Encryption is one protection that mitigates physical access - under one
> condition. The encryption keys must be unloaded when you leave the encrypted
> device alone - often, this means turning off your computer.
>
> I like to call it "defence in death" - even if the system is stolen and can
> be probed by serious hackers, they will not be able to get access to data on
> an appropriately encrypted drive.
>
> Other than that, of course, you're right - physical access to systems,
> particularly while they are on and logged on, cannot be used as the starting
> point for a "vulnerability", because the vulnerability is precisely that you
> left the machine logged on and running.
>
> Alun.
> ~~~~


True, true. Thanks for mentioning the encryption. Since my client base
is made of home users and small businesses, I usually don't think of
encryption since in that client base encryption often equals "I
encrypted my data and [fill-in-blank] so now I can't get my data.
Certainly BitLocker on corporate laptops is A Good Thing.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User
Reply With Quote