Re: Linux, BSD, and Unix are fundamentally insecure.

From: Dr. Richard E. Hawkins (hawk_at_slytherin.ds.psu.edu)
Date: 09/13/04 

Date: Mon, 13 Sep 2004 21:35:19 +0000 (UTC)

In article <ci02rs.2v4.1@maple.vr-web.de>,
Thomas Schweikle <tps@vr-web.de> wrote:
>Mike Cox wrote:

>>
>> * Because in XP and possibly later service packs in win2k the
>> password itself is used to encrypt the keys needed for EFS.
>> * Sorry, there is no way to recover the files once the password
>> has been reset. "
>>
>> http://home.eunet.no/~pnordahl/ntpasswd/
>
>This is correct. Reseting the password makes these Volumes
>inaccessible.

You've *got* to be kidding me. The entire file system is bound to a
single password which *should* be changed on a regular basis?

So when you change it, do you have to pray that the system won't crash
before it finishes rewriting the entire filesystem???

>> Windows IS secure at the console. Sometimes data is valuable that you
>> don't want someone to be able to get into your machine even if they
>> are at the console. Windows is the solution for that type of
>> situation.

>No. It is not. Except you put the system into a save. Windows NT was
>once certified for C1 security. All newer Windows versions are not.

It wasn't NT in general, but a very specifically configured NT.

hawk 

-- 
Richard E. Hawkins, Asst. Prof. of Economics    /"\   ASCII ribbon campaign
dochawk@psu.edu  111 Hiller (814) 375-4846      \ /   against HTML mail
These opinions will not be those of              X    and postings. 
Penn State until it pays my retainer.           / \

Relevant Pages

  • Re: Password Protecting a File Folder
    ... Also you need to be using NTFS and not FAT32 file system. ... Windows XP Home: ... EFS is very good at what it does and there is no back door. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Password Protecting a File Folder
    ... Also you need to be using NTFS and not FAT32 file system. ... Windows XP Home: ... EFS is very good at what it does and there is no back door. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: encrypt option
    ... You need to be using Windows XP Pro, ... File System. ... EFS is very good at what it does and there is no back door. ... "Gianfranco" wrote in message ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Verschlüsselte Laufwerke für Mobile User
    ... > Laufwerke verschlüsselt mit folgender ... Was spricht gegen das Encrypted File System (EFS) ?. ... Wird mit Windows schon ...
    (microsoft.public.de.german.win2000.sonstiges)
  • Re: Did not "activate" my XP...???
    ... something that triggered Windows Product Activation ... Is it safe to write to the HD? ... Evacuate data from HD, test HD, test file system, exclude malware ... Make whatever non-HD boot disk you like; ...
    (microsoft.public.windowsxp.general)