[CLUE-Tech] more hack attempts

Charles Oriez coriez at oriez.org
Mon Aug 9 11:12:39 MDT 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

At 12:03 PM 8/9/2004 -0400, Angelo Bertolli wrote:


>>They can attack all day long, and as long as there's no exploitable 
>>program flaw in sshd, it's highly unlikely they will ever be successful.
>>
>
>Even if brute force won't get through, I still find this particularly 
>annoying.  They waste resources and fill up the log files.  Personally, 
>I'd try to go after them.  The Internet is a shared resource--like our 
>road system.  The people who create havoc for everyone else need to be 
>taken off.

I have on more than one occasion sent my logs with a note.  Some of them 
thank me.  I had one weird one that kept insisting that I needed to send 
full headers of the email before they could investigate.

At this point, all they are trying to crack is root. We have root 
configured so that it can't be accessed remotely.  Only the console in the 
cage with the box can be used signing on as root.




- --
coriez at oriez.org 39  34' 34.4"N / 105 00' 06.3"W
"...Life is not a journey to the grave with the intention of arriving 
safely in one pretty and well preserved piece, but to slide across the 
finish line broadside, thoroughly used up, worn out, leaking oil, and 
shouting GERONIMO!!!" -- Bill McKenna, date unknown 
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>
Comment: created 6/26/04 expire 6/25/05 stored MIT & PGP.COM

iQA/AwUBQRewh7iLNnC0cMkdEQKPJQCg58DFWrKqQREi/nlTVyVoy9UyyDwAoN4L
SVlADeXTG0OWrxjm3nkIPlTz
=bkGZ
-----END PGP SIGNATURE-----




More information about the clue-tech mailing list