Re: Visited by a cracker

From: Mario Ohnewald (mario.ohnewald_at_gmx.de)
Date: 07/14/04

  • Next message: Herman F. Ebeling Jr.: "Re: Visited by a cracker" 
    To: focus-linux@securityfocus.com
Date: Wed, 14 Jul 2004 20:15:48 +0200

    On Wed, 2004-07-14 at 00:45, Alan Hicks wrote:
    > -----BEGIN PGP SIGNED MESSAGE-----
    > Hash: SHA1
    >
    > On Jul 13, 2004, at 11:20 AM, Arthur Chan wrote:
    > > Is it at all possible that the cracker tampered his .bash_history and
    > > left
    > > it there to fool you?
    >
    > Anything's possible when a cracker's involved, but I wouldn't think
    > this is a likely scenario. A good cracker wouldn't have left it so that
    > top or ps would show his processes (like the strace), and thus likely
    > wouldn't have left the .bash_history around either.

    What if he did that on purpose? It would be risky, but clever. He could
    get away with a jackpot :)

  • Next message: Herman F. Ebeling Jr.: "Re: Visited by a cracker"

    Relevant Pages

    • Re: egrep logical OR
      ... Hash: SHA1 ... +Alan Hicks+ wrote: ... > is grep a file and get lines that begin with one of two conditions. ...
      (comp.unix.shell)
    • Re: Visited by a cracker
      ... Hash: SHA1 ... > it there to fool you? ... Ecclesiastes 7:5 ...
      (Focus-Linux)
    • Re: who do I report this to?
      ... Hash: SHA1 ... the only way to do a local test I can think of is write a network ... but it has to be under your observation and control. ...
      (freebsd-current)
    • Re: help keyboard logger!
      ... Hash: SHA1 ... In message, fegge writes ... >Peter wrote: ...
      (alt.2600)
    • Re: Windows MP 11, IE 7 and Vista...
      ... Hash: SHA1 ... I'm on the verge of installing WMP 11, ... "Usenet Filters - Learn to shut yourself the fuck up!" ...
      (alt.2600)