password over ride...

susie_q

Veteran Member
Our 13 year old says he can over ride any of our passwords. What the heck!! :kk1: Is he for real? Where does he get this?!
 

Dunvegan

Inactive
My understanding is that certain versions of vBulletin do have backdoor exploits.

But I'm not saying anything more so as to encourage anyone to do anything illegal. Hacking into private systems is illegal. So, I know your son was just speaking in theoretical terms.

Mind you, you have to be somewhat skilled to use the backdoor, it only works on some versions of this particular forum software, and it can be closed, which I'll assume Dennis has already done for TB2K...so you son may only be referencing a backdoor exploit which is probably patched at this particular vBulletin forum...therefore, no worries.
 

susie_q

Veteran Member
Thank you Dunvegan...I appreciate your reply. :) We have our computers set to log on with a password, because we TRY to keep him offline for varied reasons, at times. He CAN over ride that password and yes it's wrong, but if he can do this, anyone can. At least he told me about it, but I'm feeling very insecure about the level of control over privacy if 13 year old kids know this stuff.
 

Dennis Olson

Chief Curmudgeon
_______________
It depends on what O/S you're on, and what you're trying to accomplish. How does he "override" the password, and what password are we talking about? Screen-saver password, logon password, startup (bootup) password?
 

troglodyte

Inactive
Yes, what types of passwords? If you mean the password that has been saved by IE that you used to log onto this forum (or any web site), it is trivially easy to retrieve the original password. IE "obfuscates" these saved passwords into a file, and this is easily reversable (and necessary, because IE has to have some way of knowing the original password so it can send it to a web site). Your defense here is don't give your kids admin access (make them just "user") to the computer you use, and optionally don't allow IE to save passwords automatically.

If you meant another kind of password, then which?
 

susie_q

Veteran Member
Start up password (guess you'd call it)...the one anyone needs to use (except DS) to log on to the computer to begin with. He showed me how and I was amazed! :eek:
 

troglodyte

Inactive
You mean the boot password that is set in the BIOS? (You may get this before any other Windows logon screen.) If so, that's a problem, since you can normally reset it by moving a jumper on the motherboard. Some computers have a case that can be locked with a key; that should slow him down a little. And if it doesn't, how about a good spanking?

If you're talking about the Windows logon, it would help to know which version of Windows.
 

Dennis Olson

Chief Curmudgeon
_______________
So I Assume your using FAT32 as opposed to the NTFS file system? That leaves a big security hole.

However, you can set a BOOTUP password in your PC's BIOS. This password will have to be entered before any O/S is booted. Unless he knows WHICH jumper to use, he can't reset it or get past it.
 

onetimer

Veteran Member
Dennis Olson said:
Unless he knows WHICH jumper to use, he can't reset it or get past it.

or if he pulls the motherboard battery out then puts it back all will be bypassed.
 

susie_q

Veteran Member
Good Lord...you guys baffle me with all this tech stuff. I'm gonna run and hide for a little while, :lol: so I can gain some composure. Thank you so very much for helping. :)
 

black ops

Inactive
he basically just needs to overide the system, go into admin options, make himself an administrator. Can even lock mom and dad out of the cpu if he feels like it. XP's home user security is like swiss cheese. Get a 3rd party keyboard lockout pgm. albeit there are ways to log into XP without using a keyboard.
 
Top