Tilted Forum Project Discussion Community - View Single Post

Jinn · 09-19-2006, 09:24 AM

What an asshole!

That aside, WHICH Administrator password? Many people don't realize that XP, in it's almighty-fucked idea of security, has two administrators (at least!)

There is a Computer Administrator, and there is an OS Administrator.

The Computer Administrator has the control to change all user accounts in safe mode, including the OS Administrator.

The OS Administrator has the control to change all user accounts in normal operation, including themselves (the OS Administrator).

I've saved many a hapless XP user by simply booting into Safe Mode. Because the Safe Mode (Computer) Administrator password is blank by default (especially with SLP installations from Dell and HP), you can simply log in and change the OS Administrator's password.

It's the biggest security leak in WinXP Home. I can't count the number of laptops that were "secure" only until I rebooted and hit F8. Voila, I delete your "secure" account and your computer is completely exposed - documents, pictures, etc.

I didn't even hesitate to post this, as it isn't "hacking." It's a well-documented 'feature' of WIN XP.

To fix: Reboot in Safe Mode, reset your OS Administrator password. While you're at it, create a password for your Computer Administrator too.

If he did anything more in-depth than this, it's fair to say that he's not someone you want in your household. If you want to offer him supervised computer access, set a BIOS password. He's either got to flash the BIOS memory by using a jumper on the motherboard, or pull the CMOS battery, also on the motherboard. Not impossible, but another level of security. He won't be able to boot without it.

09-19-2006, 09:24 AM	#8 (permalink)
Jinn Lover - Protector - Teacher Location: Seattle, WA	What an asshole! That aside, WHICH Administrator password? Many people don't realize that XP, in it's almighty-fucked idea of security, has two administrators (at least!) There is a Computer Administrator, and there is an OS Administrator. The Computer Administrator has the control to change all user accounts in safe mode, including the OS Administrator. The OS Administrator has the control to change all user accounts in normal operation, including themselves (the OS Administrator). I've saved many a hapless XP user by simply booting into Safe Mode. Because the Safe Mode (Computer) Administrator password is blank by default (especially with SLP installations from Dell and HP), you can simply log in and change the OS Administrator's password. It's the biggest security leak in WinXP Home. I can't count the number of laptops that were "secure" only until I rebooted and hit F8. Voila, I delete your "secure" account and your computer is completely exposed - documents, pictures, etc. I didn't even hesitate to post this, as it isn't "hacking." It's a well-documented 'feature' of WIN XP. To fix: Reboot in Safe Mode, reset your OS Administrator password. While you're at it, create a password for your Computer Administrator too. If he did anything more in-depth than this, it's fair to say that he's not someone you want in your household. If you want to offer him supervised computer access, set a BIOS password. He's either got to flash the BIOS memory by using a jumper on the motherboard, or pull the CMOS battery, also on the motherboard. Not impossible, but another level of security. He won't be able to boot without it. __________________ "I'm typing on a computer of science, which is being sent by science wires to a little science server where you can access it. I'm not typing on a computer of philosophy or religion or whatever other thing you think can be used to understand the universe because they're a poor substitute in the role of understanding the universe which exists independent from ourselves." - Willravel Last edited by Jinn; 09-19-2006 at 09:26 AM..