Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to have a really strong password as my Administrator password. Say ... if I lock down my PC with WIN+L (logout). Will anyone be able to get my password somehow with a USB device, for example? Can I use the password which I use at other places too?

(The hard drive is encrypted, so I doubt the people could get it any other way. Also, any more sophisticated attack which would require severe computer skills are out of league. The people I work with are not that good.)

share|improve this question

There are known I/O port and card slot based DMA exploits that allow an attacking device to freely read and/or write system memory. I don't know if these security holes have been patched in Windows 7. (And of course I don't know if your system has the vulnerable slots and ports in question.)

share|improve this answer

Since your computer is still turned on, the RAM is holding the necessary information to decrypt the data on your computer. This is the nature of volatile memory. Computers that sleep or remain turned on will have this issue. It is a problem and security hole in encrypted drives. Someone could potentially reboot the machine and then use a USB stick to boot a LiveCD and then access your information. To further protect yourself, put a password on the BIOS and don't allow booting from CD/USB.

share|improve this answer
Bios setting can be reset with jumper or remove battery. You should also lock your computer case to prevent physical contact with hardware component. – chmod Mar 8 '12 at 6:19

Yes, You could get at passwords the technological way, but consider the more physical aspects of password security, especially around people who are "not that good"...

  1. Don't use the same password for everything. (Ever. especially if you care about your security.)
  2. Look our for keyloggers (Physical; USB, PS2 and the software kind.)
  3. Don't let someone socially engineer the password or "shoulder-surf" the password by literally looking at your keyboard as you type.

thank you @jeff-Atwood and XKCD.

share|improve this answer
I have a very strong password which I use as my TC password too. That's why it would be easier to have one pw instead of two. That's why I'm concerned about it. – Shiki Mar 8 '12 at 1:16
then change it, and change it regularly. – G Koe Mar 8 '12 at 1:18
Added some for your enjoyment. – G Koe Mar 8 '12 at 1:22

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .