possible LKM rootkit infection

Top Page
Attachments:
Message as email
+ (text/plain)
Delete this message
Reply to this message
Author: technomage
Date:  
Subject: possible LKM rootkit infection
yes,
they used my user account (after having gained info from another rootkitted
system at another location where I sometimes came in from (other place in
town). the intrusion happened within days of the rootkitted machine being
discovered at the other location (my account there also had the same
password).

However, I have a policy of now chaning passwords on a once-per-week basis (I
have a random password generator here now).

in any case, I don't think he got very far as I caught the intrusion
initially only hours after it happened.

Technomage

On Wednesday 19 June 2002 01:00 pm, you wrote:
> You said you found an intruder on your box a few weeks back. Do you know
> how they got in?
>


--
I will not be pushed, filed, stamped, indexed, briefed, debriefed, or
numbered!
My life is my own - No. 6