[lug] Interesting Crash Report

[rm at mamma.varadinet.de]

On Wed, Mar 21, 2001 at 03:55:15PM -0700, D. Stimits wrote:

> > 
> > Some dark dark places out there!
  What, Canada? ;-)

Happened to me too. I once watched an atempt to break in while
doing some late night maintainance on one of my customers webserver.
I traced back the intruder all the way to one of their direct competitors.
When we callded them the next morning they claimed that they have
loginacounts for customers and that it was one of those ...
Pretty funny, esp. if they have ident running and the intruder ident
reads 'root' ...

> Quite true. Sounds like a good basis for a near-future Sci-Fi story that
> is a bit on the sinister side. In any case, I suppose local police would
> never be worthwhile unless the cracker was also local. FBI would
> probably be interested if it was part of some other pattern they were
> looking at, and provided the "evidence" was somehow certifiable as
> valid/unspoofed.

Unfortunately, local police usually doen't have the knowlege
to act resonably. And CERT seems only to be interested in 'new'
types of attacks (which i can partially understand).

 Ralf