Microsoft: How to Hack Vista via Linux in Just a Few Minutes

mehacomp_91

- Video tutorial

Windowshas never been an epitome of security and alternatives - the opensource Linux and Apple's Mac OS X are considered superior in thisaspect. However, Windows Vista was built as an apex of security compared to its predecessors.Featuring examples of technology as the Windows BitLocker DriveEncryption, and a revamped architecture for safeguarding sensitive userdata including account passwords, Vista is certainly designed to be anevolution in comparison to Windows XP. And yet Microsoft's latest andmost secure operating system can be completely yours in a matter ofminutes via an attack launched from Linux.


Out of all the people, Roger Halbheer,Chief Security Advisor of Microsoft EMEA is the one who highlighted theWindows Vista hack. "No, no. For sure. I am not going to give youadvice how to hack," Halbheer stated, but then pointed to a videotutorial put together by Offensive Security, demonstrating a WindowsVista hack using nothing more than a BackTrack distro of Linux.


"BackTrack is the result of the merging of two Innovative PenetrationTesting live Linux distributions - Whax and Auditor," reads thedescription of the open source operating system tailored to performpenetration testing actions. "Based on SLAX (Slackware), BackTrackprovides user modularity. This means the distribution can be easilycustomized by the user to include personal scripts, additional tools,customized kernels, etc."


The video demonstrationauthored by Jesse Varsalone involves a Windows Vista hack which spansno more than a couple of minutes, and this only because a reboot isnecessary. You will be able to see that the Logon screen in WindowsVista, with the user name and password, provides no barrier at allagainst this hack. In fact, it might as well not have existed at all.Of course, the scenario is only valid if the attacker has physicalaccess to the Vista machine. In this context, BackTrack Linux will notpermit a remote attacker to hack Vista.


"I am always amazed about this kind of videos, which still surprisepeople. If look years back, we published the 10 Immutable Laws ofSecurity, which contains Law #3: If a bad guy has unrestricted physicalaccess to your computer, it's not your computer anymore. The hack shownabove needs physical access," Halbheer emphasized.


Halbheer's solution is rather simple. Windows BitLocker DriverEncryption provides strong protection against hacks using the BackTrackLinux operating system. Still, while BitLocker is indeed shipped aspart of Windows Vista, it is only featured in the Ultimate andEnterprise SKUs. This means that all the remaining Vista editions areexposed to the BackTrack Linux hack which bypasses the Logon screencompletely, without requiring the attacker to know, guess, use bruteforce or even enter a password.

http://news.softpedia.com/news/Microsoft-How-to-Hack-Vista-via-Linux-in-Just-a-Few-Minutes-86542.shtml

farishaziqi

backtrack nie mmg best dah lame aku pakai sejak dari whax ngn auditor lagi tapi byk tools2 dia semua pakai komman line jer