Bugtraq mailing list archives

Re: Insufficient Authentication vulnerability in Asus notebook


From: Ansgar Wiechers <bugtraq () planetcobalt net>
Date: Thu, 14 May 2009 20:11:24 +0200

On 2009-05-14 nameless wrote:
You should not have any administrative accounts named "Administrator"

Nonsense. There is absolutely no need to rename the administrator
account, as long as it has a strong password. Much more critical than
that is to have the use of LM-hashes disabled. And autorun on all
drives.

Regards
Ansgar Wiechers
-- 
"The Mac OS X kernel should never panic because, when it does, it
seriously inconveniences the user."
--http://developer.apple.com/technotes/tn2004/tn2118.html


Current thread: