On Feb 11, 2004, at 10:49 pm, Bruce Johnson wrote:
This sounds like someone hacked into your system and did something like 'sudo rm-rf /'. If you're running ssh (and they know your username/password) or a vulnerable service that someone's exploited to hack into your system this is possible.
DW said their was way to much damage to the drive, the files, the directories, the nodes, etc. DW was then able to recover all of the deleted file (including the original suspect email) and rebuild the drive to perfection - God bless Disk Warrior! Like I said, I have no idea what it was. But I know how I got it and what it did. Is this something new? or a Unix thing?
DW is the Big Kahuna.
This sounds suspiciously as if you were hacked by someone really malicious, or had some really weird software failure, some runaway process, and that DW could get it back makes me think less it was a hacker than some catastrophic software failure.
If the damage was limited to one drive (i.e. anything on that hard disk alone but any partitions on it) I'd suspect it was the drive that is dying. the fact that the whole drive structure was littered with damaged 'inodes' (the standard UNIX (and HFS+ maybe??) allocation unit for drive formatting) means either it was a hacker who was able to rake the drive really badly and destroy the whole partition/drives formatting structure, or the drive itself went into one of those horrible total destruction cycles here the mechjanism doesn't do what it was supposed to do, the logic gets confused and the whole thing goes down the pan.
Check out the following things:
1. Do you have Telnet, FTP or a similar 'remote login' protocol open to outside access on your machine? If so firewall it, or seek an alternative remote login system. SSH is pretty good but not totally bullet proof, that said I've never been hacked via it in all the time I've had it open, wether on broadband or isdn.
2. Run all the usual routine checks on the drive, keep a VERY close eye on it and listen out for any big thrashing sessions that come sorta out of the blue, head-banging (repeated access to the same area - hard to describe but you'll know if you hear it) or weird clicking or anything out of the ordinary.
3. If the damage occurred on one partition of several on the drive it is less likely to be the drive, although I have had drives go haywire and only damage one of 2 partitions. If the damage occurred on one drive's total area then it is more likely the drive is on the fritz.
Run disk Utility, and fsck over the drive to see fi it's OK after the trauma. Might also do to repair permissions.
-- Mark Benson
AIM - SilValleyPirate MSN - [EMAIL PROTECTED] Visit FlatPackMacs online: <http://fpm.68kmac.com> Visit my Homepage: <http://homepage.mac.com/markbenson>
"Never send a human to do a machine's job."
-The Matrix
-- PCI-PowerMacs is sponsored by <http://lowendmac.com/> and...
Small Dog Electronics http://www.smalldog.com | Refurbished Drives | -- Sonnet & PowerLogix Upgrades - start at $169 | & CDRWs on Sale! |
Support Low End Mac <http://lowendmac.com/lists/support.html>
PCI-PowerMacs list info: <http://lowendmac.com/lists/pci-powermacs.shtml> --> AOL users, remove "mailto:"; Send list messages to: <mailto:[EMAIL PROTECTED]> To unsubscribe, email: <mailto:[EMAIL PROTECTED]> For digest mode, email: <mailto:[EMAIL PROTECTED]> Subscription questions: <mailto:[EMAIL PROTECTED]> Archive:<http://www.mail-archive.com/pci-powermacs%40mail.maclaunch.com/>
Using a Mac? Free email & more at Applelinks! http://www.applelinks.com
