Security Basics mailing list archives

re: Win 2000 User Manager Pro


From: H C <keydet89 () yahoo com>
Date: Fri, 13 Dec 2002 07:26:09 -0800 (PST)

They claim that its easy to break into admin
password 
and that if all your Win2000 machines have the same 
admin pw the hacker gets access locally to all 
machines... 

Of course it's easy to break into a system,
particularly when the admin password is blank, or
something simple like "password", or "administrator". 
It's the lazy admin who uses passwords like that. 

Regarding the issue of using the same password on all
machines...duh!  So what?  If you have other
mechanisms in place...such as ports 139 and 445
blocked at the firewall and router...then the risk
associated w/ having a weak password is limited to
external attacks.  Of course, you could simply use a
complex password, rather than something ridiculously
simple.

Tools like the one you mention have their uses, but
you have to learn to think critically when it comes to
determining if the functionality justifies the cost. 
Besides, thinking critically will allow you to burn
right through the fog thrown up by the marketing
types...



__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com


Current thread: