[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Savannah-hackers] Re: Sv back on line
From: |
Mathieu Roy |
Subject: |
[Savannah-hackers] Re: Sv back on line |
Date: |
09 Jun 2003 17:20:06 +0200 |
User-agent: |
Gnus/5.09 (Gnus v5.9.0) Emacs/21.3 |
Rudy Gevaert <address@hidden> said:
> On Mon, Jun 09, 2003 at 05:04:00PM +0200, Mathieu Roy wrote:
> >
> > The server is back on line.
>
> I do wonder what could happened. Also I did a "last" and saw that the
> user :
> Login: BoW4IamTheBOFH Name: Brandon Grace
> <address@hidden>
> Directory: /home/BoW4IamTheBOFH Shell: /usr/local/bin/cvssh
> Last login Sat Jun 7 20:21 (EDT) on pts/0 from
> ip68-1-229-241.dl.dl.cox.net
> No mail.
> No Plan.
>
> Was logged in. What a strange loginname...
Strange, indeed. We should check carefully automated diff. If he
cracked the computer, a worm may be there.
He is admin of
http://savannah.nongnu.org/projects/curphoo/
But I'm not sure that doing a simple scp/rsync not give a "last login" (CVS
ssh does not, I'm sure). And he made an scp or rsync.
He's login is strange but I suppose he's young. He's domain name is in
the same spirit.
Regards,
--
Mathieu Roy
Homepage:
http://yeupou.coleumes.org
Not a native english speaker:
http://stock.coleumes.org/doc.php?i=/misc-files/flawed-english