• (disco) in reply to David_C

    Or just use a random password that's also printed on the label. Not easily lost.

    If you're worried about the label getting scuffed to the point where it's unreadable, add a backdoor admin password that only works right after the device has been freshly factory reset, and prompts you to change it. You need physical access, same as if you wanted to read the password off the label, and it's disruptive enough that the owner would probably notice relatively quickly.

  • (disco) in reply to Quite

    Windows+L is even easier.

  • (disco) in reply to Fox
    Fox:
    Windows+L is even easier.

    But as has been noted, C-A-Del is guaranteed[1] not to be hackable and nobody's stated on the record that Win+L is that I've ever heard.

    [1] usual caveats apply, maybe.

  • (disco) in reply to FrostCat
    FrostCat:
    C-A-Del is guaranteed not to be hackable

    Well, not by anything living in user mode, provided the NT kernel is in charge. Hardware hacks are something else, as are hypervisors and other advanced shenanigans.

  • (disco) in reply to Scarlet_Manuka
    Scarlet_Manuka:
    A better approach would be to randomise them all at the factory and ship each user a bit of paper with their password. Of course, this has other costs, like when they inevitably lose it. If you don't keep a master list, then your customers are in trouble when this happens (you probably want to have some expensive bring-it-to-the-factory solution). If you do, then you've just made yourself a massive target.

    They'd just tape the paper to the device.

  • (disco) in reply to dkf
    dkf:
    FrostCat:
    C-A-Del is guaranteed not to be hackable

    Well, not by anything living in user mode, provided the NT kernel is in charge. Hardware hacks are something else, as are hypervisors and other advanced shenanigans.

    It's quite hackable if you've got admin privs. For instance, on my employer's computer, they installed something from Citrix so that at the Ctrl-Alt-Del login screen there is the option to self-unlock a frozen account by answering some security questions.

    I'm not sure exactly what they did, but it does means that it is possible for applications to alter Microsoft's Ctrl-Alt-Del behavior, at least to some extent.

  • (disco) in reply to dkf
    dkf:
    Well, not by anything living in user mode, provided the NT kernel is in charge. Hardware hacks are something else, as are hypervisors and other advanced shenanigans.

    ...and all of which are covered by the footnote I put in there.

  • (disco) in reply to David_C
    David_C:
    It's quite hackable if you've got admin privs.

    Yeah, go back up and look at that footnote I put in.

    You can replace msgina.dll, too. I wouldn't be surprised if that's what happened in your case.

  • (disco) in reply to FrostCat
    FrostCat:
    You can replace msgina.dll, too. I wouldn't be surprised if that's what happened in your case.

    ^^ this. Or they registered a new GINA. IIRC you can have multiple...

  • (disco) in reply to Tsaukpaetra
    Tsaukpaetra:
    GINA. IIRC you can have multiple...

    You down with OPP?

    Yeah. I have no idea what a GINA is WRT MS Windows.

  • (disco) in reply to boomzilla
    boomzilla:
    You down with OPP?

    NFC what this means. If Urban Dictionary is to be believed.... well I need to get some in order to get some more, right?

    boomzilla:
    Yeah. I have no idea what a GINA is WRT MS Windows.
    Microsoft Graphical Identification and Authentication:

    https://support.microsoft.com/en-us/kb/836683

    Darn, no one-box I guess.

    Essentially, it's what providesd these things when logging on to Windows: [image]

  • (disco) in reply to Tsaukpaetra

    https://www.youtube.com/watch?v=qdeH7QhGiRg

  • (disco) in reply to blakeyrat

    Recognize the tune, apparently never heard the lyrics. Listening at half speed, and I still have no idea what he's talking about, except some people and other people and hitting it? Read the lyrics, didn't help. I'll accept UrbanDictionary's idea first, 'cuz this make no cents.

  • (disco) in reply to Tsaukpaetra

    Adultery.

  • (disco) in reply to blakeyrat
    blakeyrat:
    Adultery.

    Oh! Thanks for no longer beating the bush! In that regard, my original response still applies.

  • (disco) in reply to boomzilla
    boomzilla:
    I have no idea what a GINA is WRT MS Windows.

    http://www.lmgtfy.com/?q=what+is+msgina.dll&l=1

  • (disco) in reply to FrostCat

    I think he was thinking of the Virtually Activated kind, which explains his reasons for not doing any research on the topic.

  • (disco) in reply to LB_

    No. I was just thinking about the cheap joke. I didn't research because Who cares?

  • (disco) in reply to PWolff
    PWolff:
    Hackers always get in via the Intarnets and are unable to use they're feets (if them have any).
    [image]
  • (disco) in reply to jkshapiro

    How was I supposed to know it was a power couple and not a data port?!

    True story time: My teacher's laptop got destroyed when a student plugged the power brick into the S-Video port. To the engineers who design that POS: [image]

  • (disco) in reply to Tsaukpaetra
    Tsaukpaetra:
    To the engineers who design that POS

    The Shitty Desing Thread is :arrows:.

    Why would you do that?

    Maybe because they can, maybe because the clients don't want to get used to the looks of a different type of plug/jack, maybe because some PHB has pissed them off, maybe because it's a PHB's whim, maybe because they get a bonus for using already existing cheap parts.

    POS

    "Point Of Sale" doesn't quite fit, so I looked it up and found

    pharyngo-oesophageal sphincter <POS> [Br.]

    This kinda fits - mine is a bit faulty too, especially when I've caught a cold.

  • (disco) in reply to PWolff

    That phrase is very nearly 'piece of shit'.

  • (disco) in reply to Arantor
    Arantor:
    That phrase is very nearly 'piece of shit'.

    Thanks for pointing that out to someone that has never heard or read about google.com, urbandictionary.com or internetslang.com

    *Edit*: sorry, I forgot about the Whoosh Badge of Honor.
  • (disco) in reply to PWolff

    Hey, you did get one of the three words nearly right :laughing:

  • (disco)

    I always get confused when people use POS to refer to Point of Sale.

  • (disco) in reply to PleegWat

    That's how our clients are used to use it.

    I just hope they don't secretly mean Point Of Scam.

  • (disco) in reply to Quite
    Quite:
    ctrl-alt-delete Lock This Computer

    Itym :fa_windows:+L

Leave a comment on “Safe-ty First”

Log In or post as a guest

Replying to comment #:

« Return to Article