Xref: utzoo comp.arch:7986 comp.edu:1950 comp.misc:4789
Path: utzoo!attcan!uunet!lll-winken!ncis.llnl.gov!helios.ee.lbl.gov!pasteur!ucbvax!husc6!uwvax!tank!kean
From: kean@tank.uchicago.edu (Keane Arase)
Newsgroups: comp.arch,comp.edu,comp.misc
Subject: Re: built-in security features
Summary: Don't think these systems are infallable...
Keywords: computer security, network security
Message-ID: <1546@tank.uchicago.edu>
Date: 23 Jan 89 16:13:16 GMT
References: <8846@nsc.nsc.com> <5995@polya.Stanford.EDU> <1804@maccs.McMaster.CA> <24102@amdcad.AMD.COM> <356@tcsc3b2.UUCP>
Reply-To: kean@tank.uchicago.edu (Keane Arase)
Organization: University of Chicago
Lines: 44

In article <356@tcsc3b2.UUCP> pag@tcsc3b2.UUCP (Philip A. Gross) writes:

>The AT&T 3B2 line of computers as well as the NCR Towers make use of a
>what is generally called a firmware serial number that is kept on the
>motherboard.  On the AT&T box, the serial number is recorded in one of
>four EPROMS on the motherboard. On the NCR box, it is recorded perhaps
>in some other manner.  NCR makes use of it during the installation of the
>UNIX operating system, effectively locking the OS to the particular Tower
>it was installed on.

While it is true NCR looks at the serial number on it's Towers when
installing unix, it is extremely simple to bypass this check when
installing unix.  (A couple of comments in one of the shell scripts
and unix can be installed on *any* Tower.)

No I never did this, nor do I condone such actions.  I merely wish to point
out that this type of protection can be bypassed.  (As a disclaimer, I used
to work *extensively* with NCR Towers.  Please don't ask my opinion on NCR
equipment, as I have a bias against them.)

>
>========================================+======================================
>Philip A. Gross				|
>The Computer Solution Co., Inc.  	|  I haven't heard what I have
>1009 Sycamore Square, P.O. Box 716	|  to say about that yet.
>Midlothian, VA  23113-0716	   	|
>Voice: (804)794-3491		   	|
>----------------------------------------+--------------------------------------
>INTERNET:	pag%tcsc3b2@wb3ffv.ampr.org
>USENET:		...!ames!haven!aplcen!wb3ffv!tcsc3b2!pag
>UUCP:		tcsc3b2!pag		(804)794-1514
>ATTMAIL:	attmail!tcsc3b2!pag
>*******************************************************************************
>	The opinions expressed here are strictly mine and nobody elses.
>===============================================================================
---

Keane Arase, Systems Programmer
University of Chicago Computing Organizations
Acedemic and Public Computing, Technical Project Support
kean@tank.uchicago.edu
syskean@uchimvs1.uchicago.edu

              **  Please file the standard disclaimers here  **