Reset a Windows 8 Password without using any third party software

basically by replacing utilman you can execute arbitrary code with system(?) privileges? does the login manager check the signature of the executables?

Full-disk encryption sure is nice thing to have, even if it isn't bulletproof.

Re: Reset a Windows 8 Password without using any third party software

#5

Post by huhtenberg » Thu, Dec 13, 2012, 11:09 AM UTC

hrrsn wrote: post #2

Physical access is always game over.

In theory, yes. In practice and on Windows it still maps to a lot of (superficial) hassle.

Re: Reset a Windows 8 Password without using any third party software

#6

Post by nodata » Thu, Dec 13, 2012, 11:35 AM UTC

hrrsn wrote: post #2

Physical access is always game over.

No it isn't. That would only be true assuming you have a knowledgable attacker. For most cases physical access definitely does not mean game over.

Re: Reset a Windows 8 Password without using any third party software

#7

Post by antoncohen » Thu, Dec 13, 2012, 11:39 AM UTC

I can't believe they haven't fixed that. I discovered that the login prompt ran with system-level privileges in Windows 95. I used it to play Duke3D in computer class when I was 14. You could press Ctl+Alt+Del to bring up Task Manager, from Task Manager you could choose to run a command, and run explorer.exe. It would start Windows with full admin access.

Re: Reset a Windows 8 Password without using any third party software

#8

Post by DanBC » Thu, Dec 13, 2012, 11:39 AM UTC

nodata wrote: post #6

hrrsn wrote: post #2

Physical access is always game over.

No it isn't. That would only be true assuming you have a knowledgable attacker. For most cases physical access definitely does not mean game over.

If "Bob" has access to my machine I have to assume it's game over, even if I have no idea about "Bob's" ability.

Under-estimating the ability of the attacker is a mistake, no?

Re: Reset a Windows 8 Password without using any third party software

#9

Post by Aardwolf » Thu, Dec 13, 2012, 11:43 AM UTC

nodata wrote: post #6

hrrsn wrote: post #2

Physical access is always game over.

No it isn't. That would only be true assuming you have a knowledgable attacker. For most cases physical access definitely does not mean game over.

Yes it is: remove harddrive. Put harddrive on other PC. Read contents of harddrive. Or even reboot the existing PC with an OS on USB or optical drive.

Unless the HD is encrypted of course, but that is not what this article and password is about.

Re: Reset a Windows 8 Password without using any third party software

#10

Post by judofyr » Thu, Dec 13, 2012, 11:48 AM UTC

antoncohen wrote: post #7

I can't believe they haven't fixed that. I discovered that the login prompt ran with system-level privileges in Windows 95. I used it to play Duke3D in computer class when I was 14. You could press Ctl+Alt+Del to bring up Task Manager, from Task Manager you could choose to run a command, and run explorer.exe. It would start Windows with full admin access.

Reminds me of http://i.imgur.com/fqjnK.gif