torkell: (Default)
Thomas ([personal profile] torkell) wrote2008-05-26 09:48 am

(no subject)

Apparently, the fact that someone can boot using a live CD, rename "cmd.exe" to "utilman.exe", reboot into Vista and then press Win+U to get a Local System command prompt is breaking news of a gaping security hole that means Vista is horribly insecure.

We'll completely overlook the fact that to boot your own OS you've got physical access to the machine, or that you're already running your own OS on it and hence have completely bypassed any system security short of full password- or smartcard-based encryption.

Rule three of computer security: if someone can get physical access to your computer, it's not your computer anymore.

[identity profile] pteppic.livejournal.com 2008-05-26 10:25 am (UTC)(link)
/. do tend to find any excuse plausable for MS bashing, which doesn't really help their own credibility. It just makes them look like a bunch of zealots (oh wait, they are!)

Grrrr....

[identity profile] olego.livejournal.com 2008-05-28 12:51 am (UTC)(link)
Go me! I remembered that there is a rule of computer security before noticing that you hyperlinked it. I'm now officially security-oriented. By the way, who came up with them? Was it really Microsoft? It thought I saw them somewhere else...