On Thu, 2003-11-13 at 12:12, Sam Varshavchik wrote:
> Andrew Ingram writes:
> 
> > I'm having reports from a couple of users of some very strange behaviour
> > from SqWebmail.
> > 
> > Users are logging in, then soon after logging in, they get the timeout
> > screen (and I can verify this by my logs, only 2 minutes before a
> > timeout in one case, and soft time out is set to 25 minutes). When they
> > log back in, SqWebmail has deleted some of their emails. This obviously
> > isn't happening to everyone as I'd have to take the system offline, but
> > it's happened twice in 2 weeks now and it's a bit worrying. I'm running
> > SqWebmail v3.5.1 on FreeBSD. Was there a bug in this version which
> > sometimes caused this? it's very worrying.
> 
> There is no known bug.  Sounds like someone hacked their accounts.

I would be very surprised if someone hacked the accounts, it would have
shown up in some of our logs if someone has tried to get in. Also, the 2
occurrences happened on different weeks at different times, by 2
unrelated users (on a system with over 100,000 users). It just seems
very unlikely it was a hack. I'll keep an eye on it but if anyone knows
anything that could help, please let me know.

Thanks,
Andrew



Reply via email to