> - since there's just a dozen of default administrator usernames and none of
> them has a password associated with it, it is a child's play to hook on
> the wireless network and connect to user's computer
Please consider that at least in the default config of Windows XP
professional, the system does not allow remote connections which are
authenticated by an account with a blank password. This especially
includes the entire SMB stuff (RPC, file shares, named pipes) and remote
desktop connections (Blank Password Restrictions).
References:
http://www.microsoft.com/resources/documentation/windows/xp/all/reskit/e
n-us/prdp_log_tyry.asp
http://www.microsoft.com/technet/prodtechnol/winxppro/evaluate/xpsec.msp
x
> - since there's just a dozen of default administrator usernames and none of
> them has a password associated with it, it is a child's play to hook on
> the wireless network and connect to user's computer
Please consider that at least in the default config of Windows XP
professional, the system does not allow remote connections which are
authenticated by an account with a blank password. This especially
includes the entire SMB stuff (RPC, file shares, named pipes) and remote
desktop connections (Blank Password Restrictions).
References:
http://www.microsoft.com/resources/documentation/windows/xp/all/reskit/e
n-us/prdp_log_tyry.asp
http://www.microsoft.com/technet/prodtechnol/winxppro/evaluate/xpsec.msp
x
Regards,
Denis Jedig
syneticon GbR
[ reply ]