| Author |
Message |
roclin14
Joined: 30 Mar 2010 Posts: 1
|
Posted: Tue 30 Mar 2010, 10:30 Post subject:
Security |
|
What is there to prevent a hacker from using a puppy live CD to log in as root on another person's computer and erase important files on that person's hard drive?
|
|
Back to top
|
|
 |
Béèm

Joined: 21 Nov 2006 Posts: 11782 Location: Brussels IBM Thinkpad R40, 256MB, 20GB, WiFi ipw2100. Frugal Lin'N'Win
|
Posted: Tue 30 Mar 2010, 10:37 Post subject:
|
|
Good question.
As far as I know nothing.
An this is not limited to a boot from puppy.
_________________ Time savers:
Find packages in a snap and install using Puppy Package Manager (Menu).
Consult Wikka
Use peppyy's puppysearch
|
|
Back to top
|
|
 |
DMcCunney
Joined: 02 Feb 2009 Posts: 894
|
Posted: Tue 30 Mar 2010, 12:56 Post subject:
Re: Security |
|
| roclin14 wrote: | | What is there to prevent a hacker from using a puppy live CD to log in as root on another person's computer and erase important files on that person's hard drive? |
Sure. Make sure the hacker doesn't have physical access to the machine. If someone has access to the actual machine, all bets are off.
One thing that might be done is to specify in the BIOS that the hard drive is the first place the machine will try to boot from, then set a BIOS password so it can't be changed without providing the password. The machine will still be able to read a CD, but not boot from it. (On my machines, I set the CD as the first boot option, then the HD, since I do a number of things that require booting from CD. If there's no CD in the drive, the machine boots from HD.)
This won't protect you from a case where someone with access to the machine can simply remove the HD and take it away to mount as a secondary drive in another machine and investigate at leisure.
Meanwhile, it's not a Puppy issue. There are an assortment of bootable CDs that will permit that sort of access, and the problem will be present for all of them.
______
Dennis
|
|
Back to top
|
|
 |
Lobster
Official Crustacean

Joined: 04 May 2005 Posts: 15109 Location: Paradox Realm
|
Posted: Tue 30 Mar 2010, 15:50 Post subject:
|
|
| Quote: | | What is there to prevent a hacker from using a puppy live CD to log in as root on another person's computer and erase important files on that person's hard drive? |
or . . . what is to prevent a gastro-geek removing the bios and eating it
or . . . a child of a tantrum temperament (aprox 2 years old) stuffing a peanut butter sandwich in the CD player
or . . . a militant penguin removing Windows and replacing with Linux
(Bravo I say)
ah the possibilities are endless . . .
someone might just decide to leave a Puppy Linux CD by a hacker prone PC for people to make up their own minds and behaviour . . .
Welcome to Puppy
Use at your own risk
_________________ Puppy WIKI
|
|
Back to top
|
|
 |
Béèm

Joined: 21 Nov 2006 Posts: 11782 Location: Brussels IBM Thinkpad R40, 256MB, 20GB, WiFi ipw2100. Frugal Lin'N'Win
|
Posted: Tue 30 Mar 2010, 16:49 Post subject:
|
|
I like the militant penguin.
_________________ Time savers:
Find packages in a snap and install using Puppy Package Manager (Menu).
Consult Wikka
Use peppyy's puppysearch
|
|
Back to top
|
|
 |
sfeeley
Joined: 14 Feb 2010 Posts: 807
|
Posted: Tue 30 Mar 2010, 17:15 Post subject:
|
|
Ahh, dreams of using puppy loaded onto a usb to hack the villain's computer, steal the weapon files, and then drive off in an Aston martin, woman at my side . . .
|
|
Back to top
|
|
 |
Béèm

Joined: 21 Nov 2006 Posts: 11782 Location: Brussels IBM Thinkpad R40, 256MB, 20GB, WiFi ipw2100. Frugal Lin'N'Win
|
Posted: Tue 30 Mar 2010, 17:30 Post subject:
|
|
James Bond in disguise?
_________________ Time savers:
Find packages in a snap and install using Puppy Package Manager (Menu).
Consult Wikka
Use peppyy's puppysearch
|
|
Back to top
|
|
 |
|