[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Does Security matter at all?



On 5 Jul 2000, Brian May wrote:

> As was said somewhere else (maybe even in this mailing list):
> 
> 1. rebooting a computer *could* cause suspicion in itself. All you need
> is some autoping system that regularly pings the computer (might not
> be scalable for large networks). In any-case, it is difficult to hide
> a reboot, as uptime will always show it.

Get root.
Install hacked kernel.
Reboot.
Uptime is adjusted upon reboot.

> 2. if the BIOS is password protected, opening up the computer case in
> front of a security camera is potentially very unsafe...

Most(all?) bioses have backdoor passwords.

You could also take out the camera, or take over it's signal.

> 3. Then again, it depends what you are trying to protect, and what
> insecure protocols are being used. Would anyone notice if I set up my
> laptop computer next to a public Unix system, plugged it into the
> network instead, and mounted a "secure" NFS filesystem?

Use a switch, that only allows certain hw addresses, and disables any port
with a foriegn address.  Most networks now adays are not wired peer-to-peer.

I say again.  If they have physical access, they have the machine, and the
data on it.  Period.

----BEGIN GEEK CODE BLOCK----
Version: 3.12
GCS d- s: a-- c+++ UL++++ P+ L++++ !E W+ M o+ K- W--- !O M- !V PS--
PE++ Y+ PGP++ t* 5++ X+ tv b+ D++ G e h*! !r z?
-----END GEEK CODE BLOCK-----
----BEGIN PGP INFO----
Adam Heath <doogie@debian.org>        Finger Print | KeyID
67 01 42 93 CA 37 FB 1E    63 C9 80 1D 08 CF 84 0A | DE656B05 PGP
AD46 C888 F587 F8A3 A6DA  3261 8A2C 7DC2 8BD4 A489 | 8BD4A489 GPG
-----END PGP INFO-----



Reply to: