On Mar 11, 2004, at 11:40 AM, Dennis Rowe wrote: > A quick way to fix this: don't patch your machines. Then in about 3 > months you will have free help administrating your boxes. And they say > hackers aren't helpful. > > Dennis
Actually, funny enough, I had this happen to me on a linux box about 3 years ago. It was one of the RPC exploits. This was pre-firewall time for us (politics). I found that the box was hacked, and I pulled it, reinstalled the OS, plugged it back in to suck down the updates (stupid move), and before it could update, there was someone offering to co-admin the box! I was able to track down the ISP of the originating IP, but it turned out that it was some professor's home linux box that had also been hacked. Since I did not have access to that box and the ISP was uncooperative I was never able to track the guy down. Needless to say, he very quickly was no longer co-admin on my linux box! Live and learn.... Shannon --
