full-disclosure - Re: Gates: 'You don't need perfect code' for good security

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20031102164857.291c7d87.michaelgale@bluesuperman.com>
From: michaelgale at bluesuperman.com (Michael Gale)
Subject: Re: Gates: 'You don't need perfect code' for
 good security

 Windows 2003 - HAAHHAHAAH

Ok - the company I work for now - hired me and fired the pervious network admin.

Why do you ask -- because they where running Win2k with NO problems at all. The previous network admin decided to move everything to Win2k3. 

Since then the following problems have occured:

lost file permissions
- directories and files would just loose there security permissions, so no one could access the file at. The admin could not restore the permissions, the only way to fix the issue was to make the admin the owner of the file or dir and then give access rights to the user.

inherited permissions would just stop working and reapplying - HAHAHH made no difference.

Network logins -- would just stop working, the users passwords would not longer work. Resetting them would sometimes solve the issue. 

So -- now I get to move everything back to Win2k.

Now this really sucks since I usually only do Unix / Linux system administration. 

Michael.

On Sat, 01 Nov 2003 10:48:00 -0600
Paul Schmehl <pauls@...allas.edu> wrote:

> --On Friday, October 31, 2003 10:16 PM -0800 "Charles E. Hill" 
> <chill@...ber-hill.com> wrote:
> 
> > Gates spoke as a politician.  His comments were very narrowly tailored.
> >
> > Read them close.  He spoke almost exclusively of Win2003 Server -- which
> > has  very minimal deployment and is brand new.  I don't know anyone who
> > has  actually installed Win2k3, yet.
> 
> Well, now you do.  We rolled out Win2k3 AD a month ago.  We have a number 
> of Win2k3 servers.
> 
> Paul Schmehl (pauls@...allas.edu)
> Adjunct Information Security Officer
> The University of Texas at Dallas
> AVIEN Founding Member
> http://www.utdallas.edu
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html