🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.misc
Article #857

Re: Am I being hacked?

#857
From: Craig Richmond - division
Date: Tue, 15 Dec 1992 08:42
30 lines
1496 bytes
subbarao@fc.hp.com (Kartik Subbarao) writes:

>In article <1frfh9INNil3@network.ucsd.edu> mbk@lyapunov.ucsd.edu (Matt Kennel) writes:

>Well, the /etc/passwd probably wouldn't be of any use, since it most likely
>has '*'s in the place of the password. At least I hope so, in your case.

I wanted to create a bogus password file with passwords like

have
you
cracked
every
password
yet

so that you got a nice message when you unscrambled it after running crack
on the password file :)

Alternatively you set up a dummy account with a crackable password in the
ftp passwd file and when the account is logged into, you record the IP,
finger the machine and set of alarms on your local machine.  That way, you
catch the potential hackers.

Craig
--
Craig Richmond.  Computer Officer -  Dept of Economics (morning) 380 3860
  University of Western Australia    Dept of Education (afternoon)
craig@ecel.uwa.edu.au Dvorak Keyboards RULE!  "Messes are only acceptable
if users make them.  Applications aren't allowed this freedom" I.M.VI 2-4
Technical Details
Message-ID: <1gk5p8INN8i9@uniwa.uwa.edu.au>
Path: arc1-ca.pugleaf.net!sparky!uunet!munnari.oz.au!uniwa!craig
References: <1frfh9INNil3@network.ucsd.edu> <1992Dec7.163849.11779@Princeton.EDU>

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!munnari.oz.au!uniwa!craig
From: craig@ec.uwa.oz.au (Craig Richmond - division)
Newsgroups: comp.security.misc
Subject: Re: Am I being hacked?
Date: 15 Dec 1992 08:42:16 GMT
Organization: The University of Western Australia
Lines: 30
Message-ID: <1gk5p8INN8i9@uniwa.uwa.edu.au>
References: <1frfh9INNil3@network.ucsd.edu> <1992Dec7.163849.11779@Princeton.EDU>
NNTP-Posting-Host: decel.ecel.uwa.edu.au