breakins

Thread View: comp.sys.next.sysadmin

3 messages

[T] Back to Threads [V] Tree View [G] Group Articles

3 total messages Started by simsong Simson L. Garfinkel Fri, 10 Apr 1992 16:22

#541

Author: simsong Simson L. Garfinkel
Date: Fri, 10 Apr 1992 16:22

13 lines
776 bytes

I'm doing an article for NeXTWORLD about discovering and dealing with breakins.

I'm interested in stories from people in the NeXT community.

Please email me if you have any that you can share with me:

	Simson L. Garfinkel
	simsong@nextworld.com

-simson
-- 

................................................................simson

Re: breakins

#546

Author: Steven M. Boker
Date: Fri, 10 Apr 1992 19:54

22 lines
1586 bytes

In article <1992Apr10.162220.6992@next.cambridge.ma.us> simsong@next.cambridge.ma.us writes:
>I'm doing an article for NeXTWORLD about discovering and dealing with breakins.
>
>I'm interested in stories from people in the NeXT community.
>

Here is a phenomenon that one of my users reported to me.  Once, on logging
in to his system, he saw an alert panel raised in the upper left corner
of the screen that said "Security Alert: INTRUDER".  Now the funny thing
is that this machine is not networked and does not even have UUCP enabled.
There is no getty on the modem line, although the user does dial in to the
university daily.

Has anyone else seen this panel.  I went looking for it with strings and
grep, but I haven't found what would put it up.

Steve
-- 
 #====#====#====#====#====#====#====#====#====#====#====#====#====#====#====#
 #  Steve Boker           #             "Two's bifurcation                  #
 #  smb3u@virginia.edu    #             but three's chaotic"                #
 #====#====#====#====#====#====#====#====#====#====#====#====#====#====#====#

Re: breakins

#548

Author: Rob Francis
Date: Sun, 12 Apr 1992 05:34

18 lines
1377 bytes

>Here is a phenomenon that one of my users reported to me.  Once, on logging
>in to his system, he saw an alert panel raised in the upper left corner
>of the screen that said "Security Alert: INTRUDER".  Now the funny thing
>is that this machine is not networked and does not even have UUCP enabled.
>There is no getty on the modem line, although the user does dial in to the
>university daily.
>
>Has anyone else seen this panel.  I went looking for it with strings and
>grep, but I haven't found what would put it up.

I've seen this happen before.  It was because someone was messing
around with NetInfo, removing users that were already logged in.  That
user's login doesn't just go away upon the removal of the UID, but it
can make for alert panels when they try to do something that
references NetInfo.

-rob
francisr@indiana.edu

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads