home *** CD-ROM | disk | FTP | other *** search
- From: darrylo@hpnmdla.sr.hp.com (Darryl Okahata)
- Date: Wed, 19 Aug 1992 23:42:15 GMT
- Subject: Re: HP 9000/370, no root password!
- Message-ID: <430132@hpnmdla.sr.hp.com>
- Organization: Hewlett-Packard, Santa Rosa, CA
- Path: sparky!uunet!haven.umd.edu!darwin.sura.net!mips!sdd.hp.com!hpscdc!hplextra!hpl-opus!hpnmdla!darrylo
- Newsgroups: comp.sys.hp
- References: <1992Aug15.022529.7176@mccc.edu>
- Lines: 27
-
- In comp.sys.hp, good@gdwest.gd.com (David L. Good) writes:
-
- > That's certainly an interesting "feature". Is there any way to prevent
- > this from occuring? We have a network of ~60 350s, and I'd hate to have
- > users be able to be superuser anytime they want just by cycling power on
- > a workstation!
-
- In practice, if an "attacker" has access to the hardware (disks,
- CPU, power supply, etc.), there is no way that the system can be made
- secure. You can fool yourself into thinking that the system is secure,
- but someone, somewhere, can probably always find a way to break in if
- the hardware is accessible.
-
- -- Darryl Okahata
- Internet: darrylo@sr.hp.com
-
- DISCLAIMER (unoriginal): This message is the author's personal opinion
- and does not constitute the support, opinion or policy of
- Hewlett-Packard. Any resemblance between the above views and those of
- the author's employer, his terminal, or the view out his window are
- purely coincidental. Any resemblance between the above and his own
- views is non-deterministic. The question of the existence of views in
- the absence of anyone to hold them is left as an exercise for the
- reader. The question of the existence of the reader is left as an
- exercise for the second god coefficient. (A discussion of
- non-orthogonal, non-integral polytheism is beyond the scope of this
- article.)
-