Universal exploit discovered in XP security

Sunday, February 16 2003 @ 12:00 AM EST

Contributed by: William Reyor

According to a recent post by Brian Livingston on briansbuzz.com, booting into a windows 2000 recovery console on a machine with Windows XP installed, allows full unrestricted access to the windows XP machine. If what Livingston say’s is true, any public system with XP installed isn’t secure. Livingston states in his post that “When I've spoken with Microsoft security pros about similar problems in the past, they've referred me to a company policy that says, ‘If a bad guy has unrestricted physical access to your computer, it's not your computer anymore.’ ” Obviously these Microsoft “security pros” aren’t accounting for the thousands of library, education, and office/business computers that have windows XP installed on them. All of the users of those machines have some degree of unrestricted access yet those machines are still owned by the business, schools, and libraries.

Comments (0)


Topsight.net
http://www.topsight.net/article.php/20030216000037667