Re: nouser - rootkit ?

From: Jose Nazario (jose@biocserver.BIOC.cwru.edu)
Date: 03/12/02 

Date: Tue, 12 Mar 2002 16:54:55 -0500 (EST)
From: Jose Nazario <jose@biocserver.BIOC.cwru.edu>
To: Kyle R Maxwell <kylemaxwell@yahoo.com>

On Tue, 12 Mar 2002, Kyle R Maxwell wrote:

> Obscure though it may be, a rootkit might have been written for IRIX
> either due to intentional targeting of a particular organization, or
> with the realization that IRIX deployments are typically fairly
> powerful installations, not your run-of-the-mill ISP (this includes
> folks like NASA, etc.) There have even been a few major websites that
> ran on IRIX for a good amount of time.

more common, for the hacker, are .edu installs of irix. lots of
researchers use irix. lots of those researchers are not so saavy with the
unix, even less so with the security end of it (not that irix is easy to
secure)

____________________________
jose nazario jose@cwru.edu
                           PGP: 89 B0 81 DA 5B FD 7E 00 99 C3 B2 CD 48 A0 07 80
                                       PGP key ID 0xFD37F4E5 (pgp.mit.edu)

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com