[Nottingham] Anti-v (and kmail address book)

[Robert Hart]

On Thu, 18 Aug 2005, David Wolfson wrote:

> relaxing back into naive complacancy,

My linux box at work did get hacked not so long ago. Basically I'd set up
a "temporary" user account for my brother that never got deleted. Username
and password were both "nigel". AFAICT the intruder (from Romania based on
their IP address) was scanning for machines that were running ssh, and
then checking for weak passwords.

Thankfully, I was sitting at the machine at the time and noticed the CPU
load and network activity go up as the cracker tried to install various
stuff into /tmp  and use my machine to do further scanning. Did get my
wrists slapped by IS tho.

The other one that's caught me out more than once is leaving samba print
shares passwordless. Some very dumb windows virii have been known to copy
themselves to it assuming it's a shared drive, and the result is 200 pages
of crap waiting for you when you arrive at work the next day.

Yeah, so no need for anti-v, but make sure you keep sensible passwords,
and firewall settings.

Rob
-- 
windowless room - Nottingham, GB

I think I'm getting the hang of this ;-) 


This message has been checked for viruses but the contents of an attachment
may still contain software viruses, which could damage your computer system:
you are advised to perform your own checks. Email communications with the
University of Nottingham may be monitored as permitted by UK legislation.