[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [dvd-discuss] Fwd: Bush taps Clarke as CyberdefenseChief



On Sunday 14 October 2001 20:25, you wrote:
> > > After a bit of further research, it seems that it's stored encrypted
> > > but passed through the APIs in clear.
> > > 
> > 
> > That is a more believable screw-up on their part.  (And
> > still a HUGE security hole...)
> > 
> If you think about it, it shouldn't be too big of a security hole as long
> as memory protection is used, and only the "root" account can read
> it.  BUT... then again, 98 and ME don't have memory protection, and most
> peopl eusing NT or 2000 are always logged in as admin.

The NT flavors aren't all that picky about protecting processes from
accessing each other's memory anyway.  The theory seems to be
based on the single-user computer, with software being trusted.

Then again, I'm not all that current on NT internals.

-- 
| I'm old enough that I don't have to pretend to be grown up.|
+----------- D. C. Sessions <dcs@lumbercartel.com> ----------+