Re: Hacked System

1998-12-08 Thread Jim Pick

Hakan Ardo <[EMAIL PROTECTED]> writes:

> Hi,
> we had a hacker in one of ouer Debian boxes last night. Now is it
> possible to check my system integrity by comparing it's contents with the
> centrall debian archive? And how would that de done?

You could try resurrecting the dpkgcert package.  Actually, I was
doing to take a look at it, but it may be a little while.

Andreas Jellinghaus <[EMAIL PROTECTED]> also wrote something similar
which I haven't checked out yet.  Write to him to find out more about
it.

Cheers,

 - Jim


Re: Hacked System

1998-12-08 Thread Hakan Ardo

In article <[EMAIL PROTECTED]>,
[EMAIL PROTECTED] (Rino Mardo) writes:
> This is a multi-part message in MIME format.
>
> --=3D_NextPart_000_0016_01BE22AA.97038E90
> Content-Type: text/plain;
>   charset=3D"iso-8859-1"
> Content-Transfer-Encoding: 7bit
>
> Hold on.  Your email says you're coming from debian.org and that your Debian
> boxes have been hacked.  Does that mean our Debians too?

Nope, it's a private box of mine, which has nothing to do with the centrall
debian boxes at all. The bug used (bufferoverflow in mountd) was fixed in 
the debian packages back in September, but this system wasn't updated since 
then. Sorry for the confusion.

>
>
> -Original Message-
> From: Hakan Ardo <[EMAIL PROTECTED]>
> To: debian-user@lists.debian.org 
> Date: Tuesday, December 08, 1998 12:40 PM
> Subject: Hacked System
>
>
> Hi,
> we had a hacker in one of ouer Debian boxes last night. Now is it
> possible to check my system integrity by comparing it's contents with the
> centrall debian archive? And how would that de done?
>
>   Thanx!
>

---
 Name:Hakan Ardo
 E-Mail:  [EMAIL PROTECTED]
 WWW: http://www.ub2.lu.se/~hakan/sig.html
 Public Key:  Try "finger [EMAIL PROTECTED]"
 Fingerprint: E9 81 FD 90 53 5C E9 3E  3D ED 57 15 1B 7E 29 F3
 Interests:   WWW, Programming, 3D graphics

 Thought for the day: As long as one understands, the
 spelling does not matter :-)
---

---
 Name:Hakan Ardo
 E-Mail:  [EMAIL PROTECTED]
 WWW: http://www.ub2.lu.se/~hakan/sig.html
 Public Key:  Try "finger [EMAIL PROTECTED]"
 Fingerprint: E9 81 FD 90 53 5C E9 3E  3D ED 57 15 1B 7E 29 F3
 Interests:   WWW, Programming, 3D graphics

 Thought for the day: As long as one understands, the
 spelling does not matter :-)
---


pgpcysRJ3VoyZ.pgp
Description: PGP signature


Re: Hacked System

1998-12-08 Thread Daniel Podlejski
Hakan Ardo napisal(a):
[...]
: we had a hacker in one of ouer Debian boxes last night. Now is it
: possible to check my system integrity by comparing it's contents with the
: centrall debian archive? And how would that de done?

debsums

-- 
Daniel Podlejski  [EMAIL PROTECTED]
http://underley.zakopane.top.pl/
   ... I don't need your civil war
   It feeds the rich while it buries the poor ...


Re: Hacked System

1998-12-08 Thread Rino Mardo
Hold on.  Your email says you're coming from debian.org and that your Debian
boxes have been hacked.  Does that mean our Debians too?


-Original Message-
From: Hakan Ardo <[EMAIL PROTECTED]>
To: debian-user@lists.debian.org 
Date: Tuesday, December 08, 1998 12:40 PM
Subject: Hacked System


Hi,
we had a hacker in one of ouer Debian boxes last night. Now is it
possible to check my system integrity by comparing it's contents with the
centrall debian archive? And how would that de done?

  Thanx!

---
Name:Hakan Ardo
E-Mail:  [EMAIL PROTECTED]
WWW: http://www.ub2.lu.se/~hakan/sig.html
Public Key:  Try "finger [EMAIL PROTECTED]"
Fingerprint: E9 81 FD 90 53 5C E9 3E  3D ED 57 15 1B 7E 29 F3
Interests:   WWW, Programming, 3D graphics

Thought for the day: As long as one understands, the
spelling does not matter :-)
---

BEGIN:VCARD
VERSION:2.1
N:Mardo;Rino
FN:Rino Mardo
ORG:Obaid Humaid Al-Tayer;IT Department
TITLE:Network and Systems Administrator
NOTE:Certified Lotus Professional, R4 Administrator
TEL;WORK;VOICE:+971 4 825000
TEL;WORK;FAX:+971 4 824901
ADR;WORK:;;P.O. Box 2623;Dubai;;;United Arab Emirates
LABEL;WORK;ENCODING=QUOTED-PRINTABLE:P.O. Box 2623=0D=0ADubai=0D=0AUnited Arab Emirates
URL:http://members.tripod.com/~rinom/
EMAIL;PREF;INTERNET:[EMAIL PROTECTED]
EMAIL;INTERNET:[EMAIL PROTECTED]
EMAIL;INTERNET:[EMAIL PROTECTED]
EMAIL;INTERNET:[EMAIL PROTECTED]
REV:19981208T085928Z
END:VCARD


Hacked System

1998-12-08 Thread Hakan Ardo
Hi,
we had a hacker in one of ouer Debian boxes last night. Now is it
possible to check my system integrity by comparing it's contents with the
centrall debian archive? And how would that de done?

  Thanx!
 
---
 Name:Hakan Ardo
 E-Mail:  [EMAIL PROTECTED]
 WWW: http://www.ub2.lu.se/~hakan/sig.html
 Public Key:  Try "finger [EMAIL PROTECTED]"
 Fingerprint: E9 81 FD 90 53 5C E9 3E  3D ED 57 15 1B 7E 29 F3
 Interests:   WWW, Programming, 3D graphics

 Thought for the day: As long as one understands, the
 spelling does not matter :-)
---


pgp7oJeUd2hvF.pgp
Description: PGP signature