bugtraq - Re: PALM DESKTOP SOFTWARE / WIN 2000

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 19 Jun 2003 08:10:34 -0500
From: Christopher Rector <crector@...med.edu>
To: "Scott R. Patronik" <scottrp@...alnet.com>
Subject: Re: PALM DESKTOP SOFTWARE / WIN 2000

If a user logged in and the workstation is locked, the answer is yes the user can still retrieve data.

If the user has not logged and the C-A-D screen is up waiting for a valid login, the answer is no.

Palm desktop does not start as a service and only starts after a valid logon. Another thing about Palm desktop (at least all
versions up to 4.01) Palm Desktop software had to be installed with local Admin rights for each user on 2K, then have that
right revoked back to their normal level. The sync software will only run on a user account that was installed properly.

Example:

Joe Blow user, installed Palm desktop with admin rights. Can function correctly.
Mary Smith user, logs onto the same machine with her account and tries to sync, it's a no go Palm sync will not work.

I've had some interesting experiences with Palms in our environment, 17 users on 2 shared W2K machines means I have to
install Palm desktop software 32 times. Each time giving the user local admin rights, installing, synching the first time if
it's a USB cradle (new hardware detected for each different palm), then removing the admin rights.

"Scott R. Patronik" wrote:

> If a Win NT/2000 Workstation is locked, and a Palm Cradle is connected with
> Palm Desktop Software running, information can still be retrieved and
> loaded into the Palm device from the PC without logging into the workstation.
>
> Scott R. Patronik
> scottrp@...alnet.com
> -------------------------------------------------------------------------------------------------------------------------
> PGP Key at:  http://members.localnet.com/~scottrp/patronik_pgp_key.asc
> PGP Key Fingerprint:  391E CC4A 271E 4346 274F  068D 6244 4F47 4F15 13CD
> -------------------------------------------------------------------------------------------------------------------------

--
Christopher Rector, MCSE
Computer Information Specialist
Southern Illinois University
School of Medicine
Department of Ob/Gyn
217-545-9182

Download attachment "smime.p7s" of type "application/x-pkcs7-signature" (1535 bytes)