[lug] Interesting Crash Report

[D. Stimits]

rm at mamma.varadinet.de wrote:
> 
> On Wed, Mar 21, 2001 at 03:55:15PM -0700, D. Stimits wrote:
> 
> > >
> > > Some dark dark places out there!
>   What, Canada? ;-)
> 
> Happened to me too. I once watched an atempt to break in while
> doing some late night maintainance on one of my customers webserver.
> I traced back the intruder all the way to one of their direct competitors.
> When we callded them the next morning they claimed that they have
> loginacounts for customers and that it was one of those ...
> Pretty funny, esp. if they have ident running and the intruder ident
> reads 'root' ...

Maybe the newspaper would be a better place to publish, if ident
confirms things. It isn't slander if you can prove it.

> 
> > Quite true. Sounds like a good basis for a near-future Sci-Fi story that
> > is a bit on the sinister side. In any case, I suppose local police would
> > never be worthwhile unless the cracker was also local. FBI would
> > probably be interested if it was part of some other pattern they were
> > looking at, and provided the "evidence" was somehow certifiable as
> > valid/unspoofed.
> 
> Unfortunately, local police usually doen't have the knowlege
> to act resonably. And CERT seems only to be interested in 'new'
> types of attacks (which i can partially understand).
> 
>  Ralf
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug