[Linux-disciples] Why no password for the root account?

Stephen R Laniel steve at laniels.org
Sat Apr 30 17:44:10 EDT 2005


On Sat, Apr 30, 2005 at 03:26:19PM -0400, Dylan Thurston wrote:
> In general, it is never possible to secure a computer from an attacker
> with physical access.  Systems differ a little in how difficult they
> make it, but sometimes people feel that it's not worth pretending.

I was having just this conversation with Adam mere minutes
ago. Fate, it was.

Let's imagine I

1) included a physical lock on my laptop;
2) had a password-protected BIOS;
3) had an encrypted filesystem with a secure password;
4) required an account to log in (no passwordless root
access)

Probably a determined attacker with all the time in the
world would be able to get in, but I'd think that item 3)
alone would be quite the block. No?

-- 
Stephen R. Laniel
steve at laniels.org
+(617) 308-5571
http://laniels.org/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.bostoncoop.net/pipermail/linux-disciples/attachments/20050430/6e7044e1/attachment.pgp


More information about the Linux-disciples mailing list