Laptop GPS World

A security consultant based in New Zealand has released a tool that can unlock Windows computers in seconds without the need for a password.

Adam Boileau first demonstrated the hack, which affects Windows XP computers but has not yet been tested with Windows Vista, at a security conference in Sydney in 2006, but Microsoft has yet to develop a fix.

Read more at http://www.theage.com.au/news/securi...402423638.html

__________________
Marvin Hlavac

Laptop GPS software reviews | Stores offering discounts to our members: Semsons & Co. Inc. and Deluo Electronics

<shrug>

See comments on Engadget: http://www.engadget.com/2008/03/04/w...over-firewire/. Especially see comments starting around Mar 4th 2008 2:23PM. Nothing to do specifically with Windows, but the attack exists on any Firewire-equipped machine no matter what operating system it runs.

Raymond Chen (probably the most famous blogger/developer at Microsoft) calls this the "If you do X, then you gave away the farm" phenomenon. These "security researchers" all want their 15 minutes of fame. See last paragraph of http://blogs.msdn.com/oldnewthing/ar...4/8080140.aspx for an example.

taoyue, thanks for the links and clarification!

__________________
Marvin Hlavac

Laptop GPS software reviews | Stores offering discounts to our members: Semsons & Co. Inc. and Deluo Electronics

The first thing I do with a new machine is go into the BIOS setup and disable any ports I don't plan on using. This makes the ports invisible to Windows, and prevents drivers from loading. Obviously, if you use Firewire peripherials, this isn't an option.

Rick