Path: utzoo!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!uunet!mcsun!ukc!tcdcs!swift.cs.tcd.ie!dit.ie!alawlor
From: alawlor@dit.ie (Aengus Lawlor)
Newsgroups: comp.sys.ibm.pc
Subject: Re: PASSWORD
Message-ID: <7185.25d176b6@dit.ie>
Date: 8 Feb 90 13:40:06 GMT
References: <234.25C2B9DD@uscacm.UUCP> <3385.25c5a7b5@vax5.cit.cornell.edu> <217@nesac2.att.com>
Distribution: comp
Organization: Dublin Institute of Technology
Lines: 56

In article <217@nesac2.att.com>, jec@nesac2.att.com (John Carter ATLN SADM) writes:
> In article <3385.25c5a7b5@vax5.cit.cornell.edu>, tt3x@vax5.cit.cornell.edu writes:
> ] In article <234.25C2B9DD@uscacm.UUCP>, Patrick.Mcclendon@f36.n376.z1.FIDONET.ORG (Patrick Mcclendon) writes:
> ] ] I need a program to keep an unwanted roommate off my hard drive.
> ] ] He knows how to use Cntrl-C to stop batch files with password protection 
> ] ] schemes.  Need something good.
> ] ] --  
> ] ] --
> ] ] Patrick Mcclendon == ...!usceast!uscacm!36!Patrick.Mcclendon
> ] 
> ] 	You might want to try the following:
> ] 
> ] 	1)  Lock your keyboard using the keylock feature of your ibm (most have
> ] them) when you're not on the computer.
> ] 
> ] 	2)  If you don't have a keylock, you can create "hidden subdirectories
> ] " by making different directories implementing control characters and such.
> 
> The REAL solution is to use a Tigersafe (or equivalent) board that requires
> a password, can't be bypassed by Control-C, Control-Break, or booting from
> a floppy.  This solution is expensive (about $125 - $150), but is secure.
> 
> The alternate is a software lock that uses a Control-break 'catcher' that is
> loaded via config.sys.  It can be bypassed by booting from floppy (as can most
> of the software locks).  The exception in software locks is the device driver
> that modifies the data and/or disk structure and therefore cannot be bypassed.
> The data on the disk is unreadable unless the correct password is entered.
> This isn't cheap either.
> 
> Cheap ways:	1) encrypt the file(s)
> 		2) use Norton or Mace to make the file 'hidden'
The real cheap way?
under DOS 3.3, make the first line of your autoexec
@PASSWORD
where PASSWORD is any program that will ask for a password, and will trap and
ignore CTRL C or CTRL BREAK.

As far as I know, CTRL C is only checked during screen I/O, and @PASSWORD
won't get echoed. (that @ sign is a great addition to 3.3)

trapping CTRL-BREAK shouldn't prevent major problems.

Of course, that won't affect booting from floppy.

If that is a problem, I have a (risky this) very short C program that copies
your FAT to Floppy, and scrambles it. A boot floppy contains a program to
copy the FAT back onto the hard disk from the floppy. I successfully used this
for about 3 months 2 years ago, when I was in an open office. 
> -- 
> USnail: John Carter, AT&T, 401 W. Peachtree, FLOC 2932-6, Atlanta GA 30308 
> Video:  att!nesac2!jec   attmail!jecarter   Voice:404-581-6239   | WB4HLZ
> The UNIX machine belongs to the company.  The opinions are mine. | AFB2RY
-- 
Aengus Lawlor    Dept of Computer Science.           Time flies like an arrow,
ALAWLOR@DIT.IE   Dublin Institute of Technology.     Fruit-flies like a banana
                 Kevin Street. Dublin 8. Ireland.