Article View: comp.security.misc
Article #857Re: Am I being hacked?
From: Craig Richmond - division
Date: Tue, 15 Dec 1992 08:42
Date: Tue, 15 Dec 1992 08:42
30 lines
1496 bytes
1496 bytes
subbarao@fc.hp.com (Kartik Subbarao) writes: >In article <1frfh9INNil3@network.ucsd.edu> mbk@lyapunov.ucsd.edu (Matt Kennel) writes: >Well, the /etc/passwd probably wouldn't be of any use, since it most likely >has '*'s in the place of the password. At least I hope so, in your case. I wanted to create a bogus password file with passwords like have you cracked every password yet so that you got a nice message when you unscrambled it after running crack on the password file :) Alternatively you set up a dummy account with a crackable password in the ftp passwd file and when the account is logged into, you record the IP, finger the machine and set of alarms on your local machine. That way, you catch the potential hackers. Craig -- Craig Richmond. Computer Officer - Dept of Economics (morning) 380 3860 University of Western Australia Dept of Education (afternoon) craig@ecel.uwa.edu.au Dvorak Keyboards RULE! "Messes are only acceptable if users make them. Applications aren't allowed this freedom" I.M.VI 2-4
Technical Details
Message-ID:
<1gk5p8INN8i9@uniwa.uwa.edu.au>Path:
arc1-ca.pugleaf.net!sparky!uunet!munnari.oz.au!uniwa!craigReferences:
<1frfh9INNil3@network.ucsd.edu> <1992Dec7.163849.11779@Princeton.EDU>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!munnari.oz.au!uniwa!craig From: craig@ec.uwa.oz.au (Craig Richmond - division) Newsgroups: comp.security.misc Subject: Re: Am I being hacked? Date: 15 Dec 1992 08:42:16 GMT Organization: The University of Western Australia Lines: 30 Message-ID: <1gk5p8INN8i9@uniwa.uwa.edu.au> References: <1frfh9INNil3@network.ucsd.edu> <1992Dec7.163849.11779@Princeton.EDU> NNTP-Posting-Host: decel.ecel.uwa.edu.au