🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.misc
Article #574

Re: IBM password

#574
From: Steve Bednarczyk
Date: Tue, 13 Oct 1992 17:09
40 lines
2699 bytes
In article <1992Oct8.205307.4459@ariel.ec.usf.edu> adair@eggo.tmc.edu (Jonathan Adair) writes:
>In article <1992Sep29.095334.20666@ghost.dsi.unimi.it> cotrozzi@ghost.dsi.unimi.it (Massimo Cotrozzi) writes:
>>bill@chaos.cs.umn.edu ( Hari Seldon     psychohistorian ) writes:
          >> Stuff Deleted<<

>>There's no way to protect a PC from use by unauthorized users ..

agreed!

>>( I am not talking just for DOS, for UNIX too . Think about it !!!)
>
>
>I used to use some cheap password program that went in the config.sys.
>I didn't think of it, but they suggested it in the docs for the program,
>but if you rearrange the jumpers/cables for the floppy drive(s), you
>can move your A: drive to B: (if you only have one drive), and then
>someone can't boot your machine off of floppy without actually opening 
>it up.  It's not tremendously secure, but I think someone is a lot less 
>likely to open a machine up than they are to put a bootable floppy in 
>a drive.  And if you get seriously wierd with your case, like arc-welding
>a new case from 1/4" steel...I guess you could actually approach real 
>security.

 I just installed a small security card called the GATEKEEPER made
by JDR Microdevices ($49). It intercepts the BIOS and will not allow
the boot to continue until a password is entered by the keyboard.
You cannot boot from a floppy or the hard drive. It can be disabled
by removing the card however. I bought a security padlock/case bolt
assembly to keep the case from being removed.
 I agree that these measures can be defeated by a determined person
but I hope that they will just find an easier target. Oh. The really
sensitive material has been encrypted using Norton Diskreet DES.
If they get through that - I'll offer them a raise in salary and put
them on my security committee :}
 
--
=====================================================================
== steveb@inst-sun1.jpl.nasa.gov  Amateur Callsign : NJ6J          ==
== (818) 354-8045                 Packet: NJ6J@WB6YMH.#SOCA.CA.USA ==
===================================================================== 
Technical Details
Message-ID: <1992Oct13.170957.25679@elroy.jpl.nasa.gov>
Path: arc1-ca.pugleaf.net!sparky!uunet!stanford.edu!ames!elroy.jpl.nasa.gov!inst-sun1!steveb
References: <bill.717738277@chaos.cs.umn.edu> <1992Sep29.095334.20666@ghost.dsi.unimi.it> <1992Oct8.205307.4459@ariel.ec.usf.edu>

Show Full Headers
Complete Article Headers
Newsgroups: comp.security.misc
Path: arc1-ca.pugleaf.net!sparky!uunet!stanford.edu!ames!elroy.jpl.nasa.gov!inst-sun1!steveb
From: steveb@inst-sun1.tmc.edu (Steve Bednarczyk)
Subject: Re: IBM password
Message-ID: <1992Oct13.170957.25679@elroy.jpl.nasa.gov>
Sender: news@elroy.jpl.nasa.gov (Usenet)
Nntp-Posting-Host: inst-sun1.jpl.nasa.gov
Organization: Jet Propulsion Laboratory, Pasadena, CA, USA
References: <bill.717738277@chaos.cs.umn.edu> <1992Sep29.095334.20666@ghost.dsi.unimi.it> <1992Oct8.205307.4459@ariel.ec.usf.edu>
Date: Tue, 13 Oct 1992 17:09:57 GMT
Lines: 40