Full Disclosure mailing list archives

RE: [in] Re: IE is just as safe as FireFox


From: "Todd Towles" <toddtowles () brookshires com>
Date: Sat, 20 Nov 2004 14:40:33 -0600

If you are on the box, having changed the name of the Admin is useless.
Naming doesn't safe you from a lot...a simple registry pull in Windows
will get you all the hashed passwords.  

-----Original Message-----
From: full-disclosure-admin () lists netsys com 
[mailto:full-disclosure-admin () lists netsys com] On Behalf Of 
Jeremy Davis
Sent: Friday, November 19, 2004 8:40 PM
To: full-disclosure () lists netsys com
Subject: Re: [in] Re: [Full-disclosure] IE is just as safe as FireFox

Are you able to change root's name in nix? Why not if the 
answer is no?
(Things would break right? UID 0?) Knowing the account name 
is two-thirds of the battle.
In windows it's fairly easy to change the admin name.
Not a professional here just curious...
J


On Fri, 19 Nov 2004 17:13:36 -0500, valdis.kletnieks () vt edu 
<valdis.kletnieks () vt edu> wrote:
On Fri, 19 Nov 2004 13:12:31 EST, "Crotty, Edward" said:
I'm not a Win based guy (troll?) - Un*x here - and even I 
was offended by #1.

There is such a thing as "runas" for Windows.

Yes, but is *the main design* of the system "run as a 
mortal, and use 
the 'runas' for those things that need more"?

Or is the *main design* "We'll just elect the first user as 
Administrator, and include 'runas' in case somebody wants 
to Do It The Right Way"?




_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: