Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #182769

Re: Debian 9

From Hans <hans.ullrich@loop.de>
Newsgroups linux.debian.user
Subject Re: Debian 9
Date 2017-06-28 07:10 +0200
Message-ID <tXdoK-2xT-3@gated-at.bofh.it> (permalink)
References <tX1xg-32b-33@gated-at.bofh.it> <tX6wV-6nD-7@gated-at.bofh.it> <tX6ZY-6Ou-3@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


Am Dienstag, 27. Juni 2017, 18:16:16 CEST schrieb Sean Behan:
> On Tue, Jun 27, 2017 at 05:41:57PM -0400, Fungi4All wrote:
> > Is this all it takes to hack the root account of a secure debian system?
> 

Yes, if one get physical access, you have lost! That is the reason, all of my 
personal systems are encrypted. 
> Correct, if you're on the same architecture you can actually chroot to
> acquire the same effect by issuing commands.
> 

Or you can use nice attacker tools, like "Switchblade and Haksaw",  "Rubber 
Ducký", or the very new and famous "Bash Bunny". Everything is known since a 
long time and no secret.  
> It's not really hacking, you have access to the file system, therefore
> you are able to change the data on the disk, such as passwords.
Hmm, IMO it is hacking, because you make things, which it is not intended for.

Admins should know this.

Ah, and the "Cold boot attack" which was mentioned: Take care not to hand your 
system over, until it is shut down for some minutes! :)

Kind regards

Hans

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Debian 9 <sarez45@att.net> - 2017-06-27 18:30 +0200
  Re: Debian 9 Greg Wooledge <wooledg@eeg.ccf.org> - 2017-06-27 18:50 +0200
    Re: Debian 9 Jimmy Johnson <field.engineer@gmail.com> - 2017-06-29 03:30 +0200
      Re: Debian 9 Sean Behan <seanwbehan@riseup.net> - 2017-06-29 04:10 +0200
      Re: Debian 9 Jimmy Johnson <field.engineer@gmail.com> - 2017-06-29 04:20 +0200
        Re: Debian 9 Jimmy Johnson <field.engineer@gmail.com> - 2017-06-29 10:20 +0200
  Re: Debian 9 Hans <hans.ullrich@loop.de> - 2017-06-27 19:10 +0200
    Re: Debian 9 Fungi4All <fungilife@protonmail.com> - 2017-06-27 23:50 +0200
      Re: Debian 9 Sean Behan <seanwbehan@riseup.net> - 2017-06-28 00:20 +0200
        Re: Debian 9 Hans <hans.ullrich@loop.de> - 2017-06-28 07:10 +0200
      Re: Debian 9 Andy Smith <andy@strugglers.net> - 2017-06-28 01:10 +0200
      Re: Debian 9 <tomas@tuxteam.de> - 2017-06-28 09:40 +0200
    Re: Debian 9 <dusan.vodopivec@pro-ing.rs> - 2017-06-28 12:20 +0200
      Re: Debian 9 Hans <hans.ullrich@loop.de> - 2017-06-28 12:30 +0200
        Re: Debian 9 <dusan.vodopivec@pro-ing.rs> - 2017-06-28 12:40 +0200
          Re: Debian 9 Hans <hans.ullrich@loop.de> - 2017-06-28 13:10 +0200
            Re: Debian 9 <dusan.vodopivec@pro-ing.rs> - 2017-06-28 13:20 +0200
              Re: Debian 9 Hans <hans.ullrich@loop.de> - 2017-06-28 13:30 +0200
  Re: Debian 9 deloptes <deloptes@gmail.com> - 2017-06-29 00:10 +0200

csiph-web