full-disclosure - Re: Hack into a Windows PC

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <003701c87e66$c0e13dd0$42a3b970$@us>
Date: Tue, 4 Mar 2008 18:15:13 -0800
From: "Eric Rachner" <eric@...hner.us>
To: "'Larry Seltzer'" <Larry@...ryseltzer.com>,
	"'Untitled'" <full-disclosure@...ts.grok.org.uk>
Subject: Re: Hack into a Windows PC - no password needed

Actually, it's full system compromise -- if the machine is joined to a
domain, then any domain account credentials known to that machine are
compromised as well.

And yes, the same capability exists not only on Macs but on any computer
that implements the Firewire specification.  (details at
http://storm.net.nz/projects/16)

- Eric

-----Original Message-----
From: full-disclosure-bounces@...ts.grok.org.uk
[mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of Larry
Seltzer
Sent: Tuesday, March 04, 2008 4:01 PM
To: Untitled
Subject: Re: [Full-disclosure] Hack into a Windows PC - no password needed

The key to the vulnerability: "To use the tool, hackers must connect a
Linux-based computer to a Firewire port on the target machine. The
machine is then tricked into allowing the attacking computer to have
read and write access to its memory. "

I assume this makes it a local login, not a domain login.

"Paul Ducklin, head of technology for security firm Sophos, said the
security hole found by Boileau was not a vulnerability or bug in the
traditional sense, because the ability to use the Firewire port to
access a computer's memory was actually a feature of Firewire."

So does the same capability exist on Macs?

Larry Seltzer
eWEEK.com Security Center Editor
http://security.eweek.com/
http://blogs.pcmag.com/securitywatch/
Contributing Editor, PC Magazine
larry.seltzer@...fdavisenterprise.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Download attachment "winmail.dat" of type "application/ms-tnef" (2950 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/