[1284] in WWW Security List Archive

home help back first fref pref prev next nref lref last post

RE: Re[2]: SECURITY ALERT: Password protection bug in Netscape 2

daemon@ATHENA.MIT.EDU (Michael Brennen)
Wed Dec 20 13:06:28 1995

Date: Wed, 20 Dec 1995 09:10:55 -0600 (CST)
From: Michael Brennen <mbrennen@fni.com>
To: Paul Leach <paulle@microsoft.com>
cc: www-security@ns2.rutgers.edu
In-Reply-To: <199512192359.PAA26703@imail1.microsoft.com>
Errors-To: owner-www-security@ns2.rutgers.edu

On Tue, 19 Dec 1995, Paul Leach wrote:

> to other users. In addition, Windows can be configured to require a
> password to unlock the machine if it is ever left idle for more than a
> few minutes, thus protecting the user even while logged in.

Which Windows?  3.1[1]* had a password protected screensaver -- and all it
took to get around it was Ctrl/Alt/Del, Reset or Off/On.

Does Win95 have a startup level password (and I don't know because I don't
run Win95) to prevent access at all unless a valid password is entered? 

Michael
---------------------------------------------------------------------
Michael Brennen, President   /           /           mbrennen@fni.com
FishNet, Inc.               / Internet  /         http://www.fni.com/ 
P.O. Box 940451            /  Services /     (214) 783-2553 (vox/fax)
Plano,  TX  75094-0451    /           /  finger me for PGP public key


home help back first fref pref prev next nref lref last post