Ideas

[eyedol]

Hi Good people,
Our list has been very quiet for a long time. If you have any idea on
what we can do to make it active again, feel free to share by replying
to this thread.

Also, I would like us to know that, this list is not only for asking
questions but for discussion and sharing. If you're working on any
computer related project and need ideas, feel free to post about it.
If there is any controversial or interesting articles you've come
across feel free to share, any howtos, just drop it in and anything IT
related that will make us talk, share them.

I know we're all swamped with work, assignments, todos but a little
effort to share will help someone someday, you never know. Please
lets keep the post coming. Thank you.

[Razec .]

Hi all, hi eyedol...
I agree with you...

Friends..Let's make things happen =)


Access Root without password UBUNTU 7.10.
I study at a university in the Brazil and I can access root in UBUNTU.
No. I am not admin. I'm a simple student. =)

Recovery Mode root without password.
No fail BUT anyone can have access root.
In grub you choose (Recovery Mode) and you have root access without ask password.
Start in terminal you change password root. or you create new user with permission root.

Admin: This is dangerous because anyone can have access.

Security is necessary...

cya. =)

[]'s
Razec
Computer Science Graduating
Linux User: 443515

--

[eyedol]

Thanks Razec.
Ubuntu is not all that secure then. Once you know this trick, you can
compromise
most Ubuntu systems. I wonder the essence of this feature or should i
call it flaw???

On Sep 10, 11:26 am, "Razec ." <mra...@gmail.com> wrote:
> Hi all, hi eyedol...
> I agree with you...
>
> Friends..Let's make things happen =)
>

> *
> Access Root without password UBUNTU 7.10.*

> I study at a university in the Brazil and I can access root in UBUNTU.
> No. I am not admin. I'm a simple student. =)
>

> *Recovery Mode root without password.*

> No fail BUT anyone can have access root.
> In grub you choose (Recovery Mode) and you have root access without ask
> password.
> Start in terminal you change password root. or you create new user with
> permission root.
>
> Admin: This is dangerous because anyone can have access.
>
> Security is necessary...
>
> cya. =)
>
> []'s
> Razec
> Computer Science Graduating

> <mra...@gmail.com>Linux User: 443515

[Razec .]

Hi eyedol,
I believe that is flaw, because couldn't come by this default or allow access root.

I like "Philosophy" OpenBSD: "All non-essential services are disabled. As the user/administrator becomes more familiar with the system, he will discover that he has to enable daemons and other parts of the system." - http://www.openbsd.org/security.html

Exactly..disabled some functions and user/administrator enabled when they need.


*Friends comments... your comment is necessary and important

See ya
--
Att:

Razec
Computer Science Graduating
Linux User: 443515

[George Gyau]

I was reading some articles on userability, security and privacy and i think this issues
all goes down exactly to that. Is much as ubuntu or linux fights to be more for the "common man" this things will be happening. There is been several arguments about if linux was to be common or more used like windows, it will be so prone to such issues.

Anyway lets see how userbility, privacy, and security can be on same level in any linux system. :)

--
Pinstorm Technologies
swati bidg, north avenue, santacruz(w),
mumbai 400 054 india
Cell: +919930492664
Email: geo...@pinstorm.com, ego...@gmail.com, ego...@linuxmail.org
Blog: http://egoleo.wordpress.com
It is a natural mistake to be ruled by a mad man

[eyedol]

I think there is a reason behind that but yeah, I like the OpenBSD's
philosophy, you enable stuff you need.

On Sep 11, 10:29 am, "Razec ." <mra...@gmail.com> wrote:
> Hi eyedol,
> I believe that is flaw, because couldn't come by this default or allow
> access root.
>
> I like "Philosophy" OpenBSD: "All non-essential services are disabled. As
> the user/administrator becomes more familiar with the system, he will

> discover that he has to enable daemons and other parts of the system." -http://www.openbsd.org/security.html

[eyedol]

George, could you share the link about the article, some of us are
interested.

[Odzangba Dake]

On Thu, Sep 11, 2008 at 10:29 AM, Razec . <mra...@gmail.com> wrote:

Hi eyedol,
I believe that is flaw, because couldn't come by this default or allow access root.

Hmm,
The "Recovery" option is not a flaw... it's a gaping security hole! If I understand things correctly, the root account is disabled by default. This effectively deters remote root logins so a hacker sitting his basement in China will have a lot more difficulty gaining root access to your machine. Unfortunately the Ubuntu developers have gotten it into their heads that once a hacker has physical console access to your box, there's very little anyone can do to stop him so they just left that aspect of security to the user.

The backup solution should be to lock down the Grub menu. But you're on your own here because, you'd have to hand-edit the grub menu configuration file or install StartUpManager for an easy graphical solution. The interesting thing is once you enable the root account and set a password, the Recovery option stops being an open back door into your system because now you get asked for a password. :) It begs the question, what was the point in the first place?

Odzangba
--
Life should have a sudo apt-get install -f command
Blog: http://odzangba.wordpress.com
Registered Linux User #431909
Registered Linux Machine #337242
Cell: 028 731 8690

[maxwell amuzu]

Hi all you guys,
I think we can make things happened if only we are willing to change the way we do things. I know Cecil is trying to give to us his e-Campus which I think can help us in so many ways so please if he set it up I want us all to help to make it a reality.
Peace to you all and I hope to see you at the software freedom day on the 20th Sep.
Max

[Jojoo Imbeah]

SFD rocked!