RE: user name from security logs

From: Andrew Shore (andrew.shore_at_holistecs.com)
Date: 05/31/05

  • Next message: Roberto Alcantara: "Passive FTP"
    Date: Tue, 31 May 2005 14:04:08 +0100
    To: "pierpaolo giacomin" <yrzto6@gmail.com>, "Emmanuel Goldstein" <goldstein101@gmail.com>
    
    

    Of course depending upon when you are (country) the ex-employee may have
    a legal obligation to give you the passwords. If he has "forgotten" the
    password he may be forced to remember whilst sitting in his cell.

    -----Original Message-----
    From: pierpaolo giacomin [mailto:yrzto6@gmail.com]
    Sent: 31 May 2005 09:05
    To: Emmanuel Goldstein
    Cc: security-basics@securityfocus.com
    Subject: Re: user name from security logs

    On Sun, 29 May 2005 22:26:42 +0200
    Emmanuel Goldstein <goldstein101@gmail.com> wrote:

    > Hi everybody.
    >
    > I've recently started to work in an Internet Cafe wich has a network
    > of 10 Pc's running linux (Debian Woody). The thing is that the guy
    > that was in charge of the network left without leaving the admin
    > password cause he was fired, so now we can only access the computers
    > with a regular user account.
    >
    > I have physical access to the computer and i can also access all hd's
    > files using a LiveCD linux distribution.

    ok, it's enough...
    you have to mount / or /etc in rw and delete the x between ":" on the
    root's line in /etc/passwd so you can log without password and then
    change it.

    root:x:0:0:root:/root:/bin/sh -> root::0:0:root:/root:/bin/sh

    ./pier

    -- 
        "I worry about my child and the Internet all the time, even though
    she's too young to have logged on yet. Here's what I worry about. I
    worry that 10 or 15 years from now, she will come to me and say 'Daddy,
    where were you when they took freedom of the press away from the
    Internet?'"
        --Mike Godwin, Electronic Frontier Foundation 
    

  • Next message: Roberto Alcantara: "Passive FTP"

    Relevant Pages

    • Re: user name from security logs
      ... > I've recently started to work in an Internet Cafe wich has a network ... > password cause he was fired, so now we can only access the computers ... Here's what I worry about. ...
      (Security-Basics)
    • Re: Wi-Fi: Essential Checklist
      ... comfortable with how well the computers he has on that network are ... Does he run an encrypted VPN between every computer on his network? ... to him in his ability to not worry about the odd stranger using his ... There are 500,000 compromised PCs currently trying to reconnect to a spam hub after McColo was taken out, I expect their owners /also/ thought the risk were too low to worry about. ...
      (alt.internet.wireless)
    • Re: Delete multiple workgroup in my network places
      ... I'm not sure on how to delete multiple workgroup under my network places. ... If they are computers that you know about, that you simply aren't connected to ... and not worry about the other networks. ...
      (microsoft.public.windowsxp.network_web)
    • Re: Berkley Packet Filter
      ... > For a security administrator's work station, ... network, you already have problems. ... I worry about my child and the Internet all the time, ... with "unsubscribe freebsd-security" in the body of the message ...
      (FreeBSD-Security)
    • Re: The way to hack ?
      ... definatly need to worry about the "wall" ... ... why open your network to ever script kiddie, ... > putting up the wall, but rather always be alert and prepare. ... >>ever if your computer is connected to the internet you are not save... ...
      (Security-Basics)