Article View: comp.security.misc
Article #574Re: IBM password
From: Steve Bednarczyk
Date: Tue, 13 Oct 1992 17:09
Date: Tue, 13 Oct 1992 17:09
40 lines
2699 bytes
2699 bytes
In article <1992Oct8.205307.4459@ariel.ec.usf.edu> adair@eggo.tmc.edu (Jonathan Adair) writes:
>In article <1992Sep29.095334.20666@ghost.dsi.unimi.it> cotrozzi@ghost.dsi.unimi.it (Massimo Cotrozzi) writes:
>>bill@chaos.cs.umn.edu ( Hari Seldon psychohistorian ) writes:
>> Stuff Deleted<<
>>There's no way to protect a PC from use by unauthorized users ..
agreed!
>>( I am not talking just for DOS, for UNIX too . Think about it !!!)
>
>
>I used to use some cheap password program that went in the config.sys.
>I didn't think of it, but they suggested it in the docs for the program,
>but if you rearrange the jumpers/cables for the floppy drive(s), you
>can move your A: drive to B: (if you only have one drive), and then
>someone can't boot your machine off of floppy without actually opening
>it up. It's not tremendously secure, but I think someone is a lot less
>likely to open a machine up than they are to put a bootable floppy in
>a drive. And if you get seriously wierd with your case, like arc-welding
>a new case from 1/4" steel...I guess you could actually approach real
>security.
I just installed a small security card called the GATEKEEPER made
by JDR Microdevices ($49). It intercepts the BIOS and will not allow
the boot to continue until a password is entered by the keyboard.
You cannot boot from a floppy or the hard drive. It can be disabled
by removing the card however. I bought a security padlock/case bolt
assembly to keep the case from being removed.
I agree that these measures can be defeated by a determined person
but I hope that they will just find an easier target. Oh. The really
sensitive material has been encrypted using Norton Diskreet DES.
If they get through that - I'll offer them a raise in salary and put
them on my security committee :}
--
=====================================================================
== steveb@inst-sun1.jpl.nasa.gov Amateur Callsign : NJ6J ==
== (818) 354-8045 Packet: NJ6J@WB6YMH.#SOCA.CA.USA ==
=====================================================================
Technical Details
Message-ID:
<1992Oct13.170957.25679@elroy.jpl.nasa.gov>Path:
arc1-ca.pugleaf.net!sparky!uunet!stanford.edu!ames!elroy.jpl.nasa.gov!inst-sun1!stevebReferences:
<bill.717738277@chaos.cs.umn.edu> <1992Sep29.095334.20666@ghost.dsi.unimi.it> <1992Oct8.205307.4459@ariel.ec.usf.edu>Show Full Headers
Complete Article Headers
Newsgroups: comp.security.misc Path: arc1-ca.pugleaf.net!sparky!uunet!stanford.edu!ames!elroy.jpl.nasa.gov!inst-sun1!steveb From: steveb@inst-sun1.tmc.edu (Steve Bednarczyk) Subject: Re: IBM password Message-ID: <1992Oct13.170957.25679@elroy.jpl.nasa.gov> Sender: news@elroy.jpl.nasa.gov (Usenet) Nntp-Posting-Host: inst-sun1.jpl.nasa.gov Organization: Jet Propulsion Laboratory, Pasadena, CA, USA References: <bill.717738277@chaos.cs.umn.edu> <1992Sep29.095334.20666@ghost.dsi.unimi.it> <1992Oct8.205307.4459@ariel.ec.usf.edu> Date: Tue, 13 Oct 1992 17:09:57 GMT Lines: 40