Read the article. Of course the time is well known, and the logs
are stamped. You are naive, though, if you beleive that will stop
an LEA from trashing the lives of innocents...
...and of course they'll get away with it.
Peter
[Now, I'm not excusing the FBI's jackboot tactics in this case,
but I will point out that Mr. Salomon poked at 'unusual' ports,
and zone transfered yankee.com during his investigation. An
IDS might well trigger an attack alert under those conditions.
The government's theft of his property after all this was
explained, is of course inexcusable.]
> ----------
> From: [EMAIL PROTECTED][SMTP:[EMAIL PROTECTED]]
> Reply To: [EMAIL PROTECTED]
> Sent: Tuesday, October 31, 2000 3:19 PM
> To: [EMAIL PROTECTED]
> Subject: CDR: Re: Visit a hacked site, loose your computers.
>
> Wouldn't the time of the hack be pretty well known and wouldn't the RPI
> firewall logs be timestamped or am I naive?
>
> Is knowledge being used as evidence of guilt?
>
> Mike
>
> >Andres Salomon, a fairly clued in RPI student, heard on
> > IRC that the Yankees website had been hacked. He
> > checked it out, noted some well-known Red Hat
> > security holes, and came to the conclusion that
> > there had been a DNS redirect attack. Total time:
> > 5 minutes.
> >
> > The next day, the FBI raided his dorm room and
> > seized his computers (along with a copy of ORA's
> > DNS & BIND).
> >
> > Peter Trei
> >
>
