On Tue, 2 Jan 2001, Rich Cook wrote:
> My guess from my very limited work at the seclab is: you are "owned"
> (you are somebody's bitch).
(cross my fingers and hope I haven't been "compromised".)
> Ricardo Anguiano who is on this list
> often is the right guy to ask, but here's what I say: unplug the
> ethernet cable. :-)
The only outside connection is through the DSL modem, and I didn't see any
lights blinking. So there was no active connection at the time. If the
system was compromised, then there was a program running, and busy HD is
too obvious of a hint of a break-in so it probably wasn't a pro.
> I'm not the most sophisticated guy out there,
> but I'd make a backup of important files and reinstall your system
> software. "Lock down" your box next time.
There's nothing important on the system. My original thinking was that if
the system gets compromised then I can reinstall the whole thing. I just
don't want to deal with the installation.
I rebooted the system and everything seems to be running fine. The system
had never been up for that long before so hopefully it's just a little
querk with the logging script or something.
-Mark
---
Mark K. Kim
http://www.cbreak.org/mark/
PGP key available upon request.
