how to tell whe you have a hacker?

[Craig White]

On Fri, 2006-02-17 at 17:48 -0800, Jeremy C. Reed wrote:
> On Fri, 17 Feb 2006, Technomage wrote:
> 
> > if you are using an rpm based distribution, you can do a special query 
> > of all the installed packages to see which ones have been changed.
> 
> Also with Debian packages too. Each package has a *.md5sums file under 
> /var/lib/dpkg/info. It can be used like:
> 
>  cd /
>  for m in /var/lib/dpkg/info/*md5sums ; do md5sum -c $m ; done
> 
> This will have some false positives. And it is not as powerful or useful 
> as the rpm queries though.
> 
> I suggest unplugging your network connection.
----
I've been wishing the same but for different reasons

;-)

Craig