About
Community
Bad Ideas
Drugs
Ego
Erotica
Fringe
Society
Technology
register | bbs | search | rss | faq | about
meet up | add to del.icio.us | digg it
Go Back   Community > Technology > Network (in)Security
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Network (in)Security Interesting hacks and cracks. Info on firewalls, TCP/IP, encryption, networks, and security. The ins and outs of the phone system, caller services, how things work, what's illegal and what's not, cellular phones, beepers, telephony legislation, the PUC, ISDN, taps, who's listening, and switches. Talking about phones, hacking systems, technical advice, and such is completely LEGAL in the United States -- it's covered by the First Amendment. What's illegal is conspiracy to commit a crime. So if you say something like "Meet me at 2am so we can crack a can" or "I changed my cell phone's number myself" you are criminally liable. Stating "You can crack a can by doing thus-and-so" or "If you wanted to change a cell phone's number, you could do it like so" is perfectly OK. Posting passwords, calling card numbers, or credit card numbers is forbidden on this network. Posting such info will get you booted off the net.

Reply
 
Thread Tools Display Modes
  #1   Add RandumGuy to your ignore list  
Old 2008-08-18, 23:38
RandumGuy RandumGuy is offline
Regular
 
Atlanta GA USA
Default Recently bought a laptop of unknown origin

So yeah SWIM bought a used laptop off of the street of unknown origin.

It is an HP dual core, really nice model... .when SWIM boots it up there is some sort of Novell network login once windows is booted

I can access the BIOS, but apparently this safeguard app (which is in the Preboot environment)- after POST.... encrypts the HDD so I can not install another OS. - although I haven't tried it yet, because I need an external floppy drive to load the SATA drivers to put on a fresh XP load. The computer was designed for vista, but i assume it was some office computer with a network boot-loaded XP client?

Anyone have any tips or good information on how to get past this? I know that it is not a good idea to hook this computer up to a network for security and tracking issues, so I'll hold off... Hopefully it doesn't pick up a neighbors unsecured wireless network.

I believe the name of the program is Safeguard Easy v.4.10 or 4.11

before the OS loads, it asks if i want to cancel the autologin by hitting F2, i hit F2 and it prompts me for a username/pw, which I do not know

I'd be highly appreciative of any help
Reply With Quote
  #2   Add O RLY to your ignore list  
Old 2008-08-19, 00:00
O RLY O RLY is offline
Moderator
 
Padmasana Send a message via AIM to O RLY Send a message via MSN to O RLY
Talking Re: Recently bought a laptop of unknown origin

Quote:
Originally Posted by RandumGuy View Post
So yeah SWIM bought a used laptop off of the street of unknown origin.

It is an HP dual core, really nice model... .when SWIM boots it up there is some sort of Novell network login once windows is booted

I can access the BIOS, but apparently this safeguard app (which is in the Preboot environment)- after POST.... encrypts the HDD so I can not install another OS. - although I haven't tried it yet, because I need an external floppy drive to load the SATA drivers to put on a fresh XP load. The computer was designed for vista, but i assume it was some office computer with a network boot-loaded XP client?

Anyone have any tips or good information on how to get past this? I know that it is not a good idea to hook this computer up to a network for security and tracking issues, so I'll hold off... Hopefully it doesn't pick up a neighbors unsecured wireless network.

I believe the name of the program is Safeguard Easy v.4.10 or 4.11

before the OS loads, it asks if i want to cancel the autologin by hitting F2, i hit F2 and it prompts me for a username/pw, which I do not know

I'd be highly appreciative of any help

Get a linux live CD, mount the drive, and format. That should clear it up.
__________________
In Silence I lay for that Fateful Day. 0day.

jamato@email.itt-tech.edu <-- My Email
Reply With Quote
  #3   Add RandumGuy to your ignore list  
Old 2008-08-19, 00:04
RandumGuy RandumGuy is offline
Regular
 
Atlanta GA USA
Default Re: Recently bought a laptop of unknown origin

Quote:
Originally Posted by O RLY View Post
Get a linux live CD, mount the drive, and format. That should clear it up.
i believe the software is on the MBR and etc...

heres some info http://americas.utimaco.com/safeguard_easy/
Reply With Quote
  #4   Add Prometheum to your ignore list  
Old 2008-08-19, 01:12
Prometheum Prometheum is offline
Regular
 
01 Send a message via AIM to Prometheum Send a message via MSN to Prometheum
Default Re: Recently bought a laptop of unknown origin

Quote:
Originally Posted by RandumGuy View Post
i believe the software is on the MBR and etc...

heres some info http://americas.utimaco.com/safeguard_easy/
So kill the MBR. That's just the first part of the disc, not some magic netherworld of evil.

The link says that it's an encryption product. You won't be able to read the files, you'll just have to overwrite them.

Might as well make a backup too, and keep it in a safe place, so that when you get caught, you'll be able to give them their files back.

Last edited by Prometheum; 2008-08-19 at 01:19.
Reply With Quote
  #5   Add oddballz194 to your ignore list  
Old 2008-08-19, 01:18
oddballz194 oddballz194 is offline
Super Moderator
 
I'm dead
Default Re: Recently bought a laptop of unknown origin

If it's in the MBR, and you're in a Linux LiveCD/LiveDVD, just login as root (should be easy -- there should be a default password they tell you, or no password at all). Now, execute "dd if=/dev/zero of=/dev/hda bs=512 count=1". Congrats, you've just killed the MBR on the first hard drive (if it's normal ATA, if SATA or SCSI it'd be a different name than /dev/hda).
__________________
oddballz194@gmail.com <-- my email

Quote:
Originally Posted by -SpectraL View Post
Having actually been a signature for quite some time on the end of two well-known moderator's frequent posts, I can tell you it's not all it's cracked up to be. I got absolutely no royalties what-so-ever, even though I did patiently wait at the mail-slot for weeks on end, savoring the large checks due to come in! Next time I'm going to consult a lawyer first before allowing someone to abuse and flaunt me as their pet-signature. I mean, really! The noive!
Reply With Quote
  #6   Add O RLY to your ignore list  
Old 2008-08-19, 03:42
O RLY O RLY is offline
Moderator
 
Padmasana Send a message via AIM to O RLY Send a message via MSN to O RLY
Talking Re: Recently bought a laptop of unknown origin

Quote:
Originally Posted by oddballz194 View Post
If it's in the MBR, and you're in a Linux LiveCD/LiveDVD, just login as root (should be easy -- there should be a default password they tell you, or no password at all). Now, execute "dd if=/dev/zero of=/dev/hda bs=512 count=1". Congrats, you've just killed the MBR on the first hard drive (if it's normal ATA, if SATA or SCSI it'd be a different name than /dev/hda).
Wow... That is a nice little trick to know.
__________________
In Silence I lay for that Fateful Day. 0day.

jamato@email.itt-tech.edu <-- My Email
Reply With Quote
  #7   Add oddballz194 to your ignore list  
Old 2008-08-19, 14:15
oddballz194 oddballz194 is offline
Super Moderator
 
I'm dead
Default Re: Recently bought a laptop of unknown origin

Quote:
Originally Posted by O RLY View Post
Wow... That is a nice little trick to know.
Yep -- you can read or write directly to the virtual device files in *nix. It's handy for making .iso images from CD-ROMs, also -- "dd if=/dev/cdrom of=output.iso" does the trick.
__________________
oddballz194@gmail.com <-- my email

Quote:
Originally Posted by -SpectraL View Post
Having actually been a signature for quite some time on the end of two well-known moderator's frequent posts, I can tell you it's not all it's cracked up to be. I got absolutely no royalties what-so-ever, even though I did patiently wait at the mail-slot for weeks on end, savoring the large checks due to come in! Next time I'm going to consult a lawyer first before allowing someone to abuse and flaunt me as their pet-signature. I mean, really! The noive!
Reply With Quote
  #8   Add RandumGuy to your ignore list  
Old 2008-08-19, 21:13
RandumGuy RandumGuy is offline
Regular
 
Atlanta GA USA
Default Re: Recently bought a laptop of unknown origin

Quote:
Originally Posted by oddballz194 View Post
If it's in the MBR, and you're in a Linux LiveCD/LiveDVD, just login as root (should be easy -- there should be a default password they tell you, or no password at all). Now, execute "dd if=/dev/zero of=/dev/hda bs=512 count=1". Congrats, you've just killed the MBR on the first hard drive (if it's normal ATA, if SATA or SCSI it'd be a different name than /dev/hda).
thank you sir...


I have gotten past the safeguard... i've been monitoring the system before I plug it up to the web and i'm trying to see if lojack is installed... I've been looking for processes/registry keys/services called rpcnet.exe / dll, etc...

anyone know how to check for lojack?

I just wanna be on the safe side before i hook it up to the web
Reply With Quote
  #9   Add Prometheum to your ignore list  
Old 2008-08-19, 21:48
Prometheum Prometheum is offline
Regular
 
01 Send a message via AIM to Prometheum Send a message via MSN to Prometheum
Default Re: Recently bought a laptop of unknown origin

If you install Gnu on the laptop, all software on the disk you wiped will be obliterated and any windows executables won't be able to run.
Reply With Quote
  #10   Add psycho_8b to your ignore list  
Old 2008-08-25, 20:25
psycho_8b psycho_8b is offline
Moderator
 
East end
Default Re: Recently bought a laptop of unknown origin

How about this...You obviously have another computer to run Windows on.

Why not install *nix on the laptop?
Reply With Quote
Reply

Thread Tools
Show Printable Version Show Printable Version
Email this Page Email this Page
Display Modes
Linear Mode Linear Mode
Hybrid Mode Switch to Hybrid Mode
Threaded Mode Switch to Threaded Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Forum Jump

 
To the best of our knowledge, the text on this page may be freely reproduced and distributed.
 

totse.com certificate signatures
 
 
About | Community | Bad Ideas | Drugs | Ego | Erotica | Fringe | Society | Technology
Hot Topics