[alt.security] Is this a good Idea? WAS Re: root passwd change on 3b2/310

isolated@alix.UUCP (20 James D. Corder) (07/21/90)

In article <34137@ut-emx.UUCP> rchan@ut-emx.UUCP (Ricardo Chan) writes:
>I have a 3B2/310 computer with an unknown root passwd.  
>Could anyone tell me the procedure to get to it and change it?
>I got stuck in the part about getting into the hardware mode.
>I'll appreciate any responses and promise to keep them in a safer
>place this time.

Hello NetPeople:-)

	I was about to respawn to this question.  Then it struck me:
How does one know if said poster is the SysAdmin?  If he/she is then
I would have no problem giving out such information.  Could a responce
to such cause the root [zero id] password to be changed on all the
3B2s at BigWig U?

	Interesting topic?:-)

Just my .02$,
James D. Corder
...osu-cis!alix!jdc
...att!osu-cis!alix!jdc
alix!jdc@cis.ohio-state.edu

ram@attcan.UUCP (Richard Meesters) (07/23/90)

In article <294@alix.UUCP>, isolated@alix.UUCP (20 James D. Corder) writes:
> In article <34137@ut-emx.UUCP> rchan@ut-emx.UUCP (Ricardo Chan) writes:
> >I have a 3B2/310 computer with an unknown root passwd.  
> >Could anyone tell me the procedure to get to it and change it?
> 
> 	I was about to respawn to this question.  Then it struck me:
> How does one know if said poster is the SysAdmin?  If he/she is then
> I would have no problem giving out such information.  Could a responce
> to such cause the root [zero id] password to be changed on all the
> 3B2s at BigWig U?
> 
> 	Interesting topic?:-)

Well, the only way I know of to change the root password if you can't log in
to the box as root is to use "magic mode".  That requires that you not only
have access to the physical unit, but also to the foundation set software, 
_and_ the system has to be taken down to use it.  The university/business in
question would have to have pretty lax security on their machine rooms in
in order to let something like you suggest happen.

Regards,

------------------------------------------------------------------------------
     Richard A Meesters                |
     Technical Support Specialist      |     Insert std.logo here
     AT&T Canada                       |
                                       |     "Waste is a terrible thing
     ATTMAIL: ....attmail!rmeesters    |      to mind...clean up your act"
     UUCP:  ...att!attcan!ram          |
------------------------------------------------------------------------------

tr@samadams.princeton.edu (Tom Reingold) (08/01/90)

In article <294@alix.UUCP> isolated@alix.UUCP (James D. Corder)
writes:

$ 	I was about to respawn to this question.  Then it struck me:
$ How does one know if said poster is the SysAdmin?  If he/she is then
$ I would have no problem giving out such information.  Could a responce
$ to such cause the root [zero id] password to be changed on all the
$ 3B2s at BigWig U?

I don't think it's worthwhile to try to keep info on how to break in
secret.  It won't work.  So if I run a system and I know how it can be
broken, I may know how to prevent or watch for breakins.

I think our legal system is built this way.  It's legal for me to tell
you how to make a bomb.  It's illegal for you to set one off.
--
                                        Tom Reingold
                                        tr@samadams.princeton.edu
                                        rutgers!princeton!samadams!tr
                                        201-577-5814
                                        "Brew strength depends upon the
                                         amount of coffee used." -Black&Decker