For the grub hack: If you are able to get the /bin/sh and remount rw you could just run passwd to change the root password, if you dont want to change the root password you can edit /etc/passwd to create a temp account with root privileges, just add a line the same as the root with other name, then passwd <new account> and you have a new uid: 0 giud: 0 account.
Sometimes you can just edit the boot option with -s at the end for single user mode, in many distros it wont ask you for root password.

For lilo hack if it is not set a password you could do this steps:

LILO: linux single

In many systems this will drop you in a root shell, but in some other in will drop you on a emergency prompt asking you for root password, if you are lucky you may be able to hit ^C
If this doesnt work you can do this

LILO: linux init=/bin/bash rw

now youmight do passwd or modify the /etc/passwd /etc/shadow, but becareful once you are done to do

mount -o remount,ro /

now you can safely reboot the system
this is my little apport for you guys, maybe you already knew about this or not, but i just wanted to help

greetz

jmoncayo

Why remount / ? The "shutdown" command syncs filesystems before halting or rebooting.

Changing the root password is a good way to be detected. Adding superuser accounts, a little less so, but still pretty obvious. A suid shell might be a little more discreet, if you must.

Also, there's nothing wrong with init=/bin/bash, but I've always just set the runlevel to 1 (or "single").

.

@occasus - yes, sorry for not being clear. i was in fact referring to EFS. you need both the public and private keys for those files. all other ntfs files can be recovered this way. thanks for clearing that up however.

.

Very cool, rhican. Thanks for your post.
This post is however, going to be a lot less technical and a lot more "lame" than his

We all know that there's a "Hide extensions for known file types" option in the "folder options" of windows. You can "hide" folders from viewing with this "feature". However, they'd still be accessible (i.e. not encrypted). By "hiding", I refer to the changing of the icon and the target accessed after double-clicking the folder.

Just rename the folders to...


Where the name at the front refers to the icon and access target you would like to change your folder's to.

To make them viewable again, either uncheck the option of hiding file extensions or just rename the folders and remove the long stuff at the end

Of course, I don't recommend this, since some people love spring-cleaning seemingly-useless stuff

.

.

.

.