Re: Debian 9
Am Dienstag, 27. Juni 2017, 18:16:16 CEST schrieb Sean Behan:
> On Tue, Jun 27, 2017 at 05:41:57PM -0400, Fungi4All wrote:
> > Is this all it takes to hack the root account of a secure debian system?
>
Yes, if one get physical access, you have lost! That is the reason, all of my
personal systems are encrypted.
> Correct, if you're on the same architecture you can actually chroot to
> acquire the same effect by issuing commands.
>
Or you can use nice attacker tools, like "Switchblade and Haksaw", "Rubber
Ducký", or the very new and famous "Bash Bunny". Everything is known since a
long time and no secret.
> It's not really hacking, you have access to the file system, therefore
> you are able to change the data on the disk, such as passwords.
Hmm, IMO it is hacking, because you make things, which it is not intended for.
Admins should know this.
Ah, and the "Cold boot attack" which was mentioned: Take care not to hand your
system over, until it is shut down for some minutes! :)
Kind regards
Hans
Reply to: