Re: I've been cracked! (hamm, 2.0.35)

1999-03-15 Thread Raymond A. Ingles
On Tue, 16 Mar 1999, buns wrote: > " Raymond A. Ingles" wrote: > > > The address seem to indicate that the intruder originates from Malaysia. > > > > As does yours. > > Rest assured that mine does. BTW, I meant to put a smiley after that "As does yours" part, sorry. > I sincerely think that t

Re: I've been cracked! (hamm, 2.0.35)

1999-03-15 Thread buns
" Raymond A. Ingles" wrote: > On Sun, 14 Mar 1999, buns wrote: > > > This is a bit off-topic. > > > > " Raymond A. Ingles" wrote: > > > > > On Sat, 13 Mar 1999, Don Erickson wrote: > > > > > > > Somebody (through jhb60.jaring.my) wandered into my system, set up a > > > > user > > > > account for

Re: I've been cracked! (hamm, 2.0.35)

1999-03-15 Thread Raymond A. Ingles
On Sun, 14 Mar 1999, buns wrote: > This is a bit off-topic. > > " Raymond A. Ingles" wrote: > > > On Sat, 13 Mar 1999, Don Erickson wrote: > > > > > Somebody (through jhb60.jaring.my) wandered into my system, set up a user > > > account for themselves and set up a couple of programs, eggdrop and

Re: I've been cracked! (hamm, 2.0.35)

1999-03-14 Thread buns
This is a bit off-topic. " Raymond A. Ingles" wrote: > On Sat, 13 Mar 1999, Don Erickson wrote: > > > Somebody (through jhb60.jaring.my) wandered into my system, set up a user > > account for themselves and set up a couple of programs, eggdrop and smurf. > The address seem to indicate that the i

Re: I've been cracked! (hamm, 2.0.35)

1999-03-13 Thread thomas lakofski
Probably a good idea long-term to subscribe to BUGTRAQ, or at least, debian-security-announce. usually you'll have some leeway between discovery of an exploit and potentially being attacked with it, but if you're wide open for weeks it's definitely asking for trouble. it's also worth shutting dow

Re: I've been cracked! (hamm, 2.0.35)

1999-03-13 Thread Don Erickson
In article <[EMAIL PROTECTED]> you write: > > Then they typically use a "rootkit" to get root access and replace files, >just as you've seen. "ls" is usually the first one they hack. Thanks to all for the good advice, I'm using this as an excellent excuse to upgrade my creaky 486 and start over w

Re: I've been cracked! (hamm, 2.0.35)

1999-03-13 Thread M.C. Vernon
On Sat, 13 Mar 1999, Raymond A. Ingles wrote: > On Sat, 13 Mar 1999, Don Erickson wrote: > > > Somebody (through jhb60.jaring.my) wandered into my system, set up a user > > account for themselves and set up a couple of programs, eggdrop and smurf. Also, upgrade your kernel when you reinstall -

Re: I've been cracked! (hamm, 2.0.35)

1999-03-13 Thread Raymond A. Ingles
On Sat, 13 Mar 1999, Don Erickson wrote: > Somebody (through jhb60.jaring.my) wandered into my system, set up a user > account for themselves and set up a couple of programs, eggdrop and smurf. Typically this is done by "script kiddies" who aren't particularly good computer users, but they take

Re: I've been cracked! (hamm, 2.0.35)

1999-03-13 Thread Mitch Blevins
In foo.debian-user, you wrote: > Somebody (through jhb60.jaring.my) wandered into my system, set up a user > account for themselves and set up a couple of programs, eggdrop and smurf. > I've not been using encrypted passwords, I understand that there are ways > to derive the "salt" that the passwd

I've been cracked! (hamm, 2.0.35)

1999-03-13 Thread Don Erickson
Somebody (through jhb60.jaring.my) wandered into my system, set up a user account for themselves and set up a couple of programs, eggdrop and smurf. I've not been using encrypted passwords, I understand that there are ways to derive the "salt" that the passwd file uses? Anyway, this person hid a