Feeds

Tool makes mincemeat of Windows passwords

This Firewire is out of control

Protecting against web application threats using SSL

A security researcher has released an easy-to-use tool that accesses locked Windows computers in seconds without entering a password.

The tool, which was released Tuesday by Adam Boileau, works by connecting a Linux machine to the Firewire port of the target PC and modifying the password protection that's stored in local memory.

The attack exploits a well-known weakness in Firewire that makes it easy for connected devices to read and write to the memory of the host machine. Similar hacks work on machines running OS X and Linux (see here).

Of course, the attack depends on having physical access to the targeted machine, and as most El Reg readers know, anyone who has physical control of the PC owns it. Then again, password protections have been a useful way to briefly secure a machine while a user runs to the bathroom. Until now. As Boileau's tool makes clear, such protections can be bypassed in a matter of seconds.

The other potential shortcoming to the attack is that it requires the targeted machine to have an IEEE 1394 port, better known as Firewire. This might present a problem for those trying to attack an older machine, but as Firewire ports have grown in popularity (seven out of eight laptops had one in an informal survey of Reg machines), the requirement is becoming less and less of an issue.

It's the second attack in as many weeks to siphon information that's stored in a computer's random access memory. Previously, researchers documented a novel way to access files that presumably were locked using disk encryption by accessing a "ghost image" of the key stored on a computer's memory chips.

Boileau first demonstrated the Windows shortcoming at a 2006 conference. But until now he has stopped short of publicly releasing the tool because "Microsoft was a little cagey about exactly whether Firewire memory access was a real security issue or not and we didn't want to cause any real trouble." according to this article.

Now that Boileau has refocused attention on the attack, Microsoft is sure to point out that it's made possible by features built into the IEEE 1394 specification. That's true, but we're not sure that's enough to get Microsoft off the hook for failing to fix a weakness that's been in the public domain for at least two years.

After all, how hard could it be disable Firewire connections while a PC is locked? ®

Reducing the cost and complexity of web vulnerability management

More from The Register

next story
Spies would need SUPER POWERS to tap undersea cables
Why mess with armoured 10kV cables when land-based, and legal, snoop tools are easier?
Early result from Scots indyref vote? NAW, Jimmy - it's a SCAM
Anyone claiming to know before tomorrow is telling porkies
TOR users become FBI's No.1 hacking target after legal power grab
Be afeared, me hearties, these scoundrels be spying our signals
Jihadi terrorists DIDN'T encrypt their comms 'cos of Snowden leaks
Intel bods' analysis concludes 'no significant change' after whistle was blown
Home Depot: 56 million bank cards pwned by malware in our tills
That's about 50 per cent bigger than the Target tills mega-hack
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
China hacked US Army transport orgs TWENTY TIMES in ONE YEAR
FBI et al knew of nine hacks - but didn't tell TRANSCOM
Microsoft to patch ASP.NET mess even if you don't
We know what's good for you, because we made the mess says Redmond
NORKS ban Wi-Fi and satellite internet at embassies
Crackdown on tardy diplomatic sysadmins providing accidental unfiltered internet access
prev story

Whitepapers

Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.