Go Back   The Scream! > COMPUTER RELATED > General Software

Reply
 
Thread Tools Display Modes
  #1  
Old 05-March-2008, 17:54
gem's Avatar
gem gem is offline
 
Join Date: May 2001
Location: Currently in Brittany, France
Posts: 5,606
Exclamation Tool makes mincemeat of Windows passwords

From The Register
Tool makes mincemeat of Windows passwords
By Dan Goodin in San Francisco Published Tuesday 4th March 2008 23:57 GMT
A security researcher has released an easy-to-use tool that accesses locked Windows computers in seconds without entering a password.
The tool, which was released Tuesday by Adam Boileau, works by connecting a Linux machine to the Firewire port of the target PC and modifying the password protection that's stored in local memory.
The attack exploits a well-known weakness in Firewire that makes it easy for connected devices to read and write to the memory of the host machine. Similar hacks work on machines running OS X and Linux (see here).
Of course, the attack depends on having physical access to the targeted machine, and as most El Reg readers know, anyone who has physical control of the PC owns it. Then again, password protections have been a useful way to briefly secure a machine while a user runs to the bathroom. Until now. As Boileau's tool makes clear, such protections can be bypassed in a matter of seconds.
The other potential shortcoming to the attack is that it requires the targeted machine to have an IEEE 1394 port, better known as Firewire. This might present a problem for those trying to attack an older machine, but as Firewire ports have grown in popularity (seven out of eight laptops had one in an informal survey of Reg machines), the requirement is becoming less and less of an issue.
It's the second attack in as many weeks to siphon information that's stored in a computer's random access memory. Previously, researchers documented a novel way to access files that presumably were locked using disk encryption by accessing a "ghost image" of the key stored on a computer's memory chips.
Boileau first demonstrated the Windows shortcoming at a 2006 conference. But until now he has stopped short of publicly releasing the tool because "Microsoft was a little cagey about exactly whether Firewire memory access was a real security issue or not and we didn't want to cause any real trouble." according to this article.
Now that Boileau has refocused attention on the attack, Microsoft is sure to point out that it's made possible by features built into the IEEE 1394 specification. That's true, but we're not sure that's enough to get Microsoft off the hook for failing to fix a weakness that's been in the public domain for at least two years.
After all, how hard could it be disable Firewire connections while a PC is locked?
__________________
GEM
Reply With Quote
Reply

Tags
chips, files, hacks, key, mail, port, security, survey, windows

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
10 Years On: Windows 95 Remembered Scoobs General Software 14 21-August-2009 23:00
Stupid File Brechenme Hardware 20 14-July-2005 18:45
weird bot / webserver logs.. silver General Internet Questions 13 13-April-2005 23:23
dun code for windows stonedtech Broadband Internet Access 5 26-January-2005 01:35
Network worm uses weak Windows passwords gem PC Security 10 13-March-2003 10:06


All times are GMT +1. The time now is 05:41.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2018, vBulletin Solutions, Inc.
Copyright 1999-2014 The Scream!