🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.misc
Article #643

Re: IBM password

#643
From: Bruce Clement
Date: Wed, 30 Sep 1992 10:57
24 lines
1558 bytes
rlee@csugrad.cs.vt.edu writes in article <BvAv1r.M8C@csugrad.cs.vt.edu>:
> 
> Does anyone know of a program that puts a password program in the config.sys and
> the boot sector of an IBM PC?  I know of many that it's in the autoexec.bat
> but that is almost laughable.

There's a shareware program around called PC-VAULT. We use it at work on
all our portables (Sorry, but I'm at home now & don't have access to any info
on author or registration fees).

It works by requiring a password before booting DOS. The DOS partition
is not readable by DOS booted from a floppy, but I don't know if that is
acheived by fiddling the partition table or by encrypting the disk.

In either case, I would only look on encryption as a defense against relatively 
simple attacks. Presumably the program can be read with a debugger, and the 
key should be derivable from the fact that the plain text of the DOS boot 
sector is known.

Against that, there is a good chance that anyone stealing your PC would simply
repartition/reformat & your sensitive data would go unread.

--
Bruce Clement    (frey@alfheim.actrix.gen.nz  SNEWS/2,  UUPC 1.11q)
Technical Details
Message-ID: <717850655snx@alfheim.actrix.gen.nz>
Path: arc1-ca.pugleaf.net!sparky!uunet!zaphod.mps.ohio-state.edu!wupost!waikato.ac.nz!comp.vuw.ac.nz!actrix!alfheim!frey
References: <BvAv1r.M8C@csugrad.cs.vt.edu>

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!zaphod.mps.ohio-state.edu!wupost!waikato.ac.nz!comp.vuw.ac.nz!actrix!alfheim!frey
Newsgroups: comp.security.misc
Subject: Re: IBM password
Message-ID: <717850655snx@alfheim.actrix.gen.nz>
From: frey@alfheim.actrix.gen.nz (Bruce Clement)
Date: Wed, 30 Sep 92 10:57:35 GMT
References: <BvAv1r.M8C@csugrad.cs.vt.edu>
Distribution: world
Organization: Private System
Lines: 24