This workstation compromised... Not sure how, but...

[Scott Elcomb]

Before anyone responds as far as "trying again" - I did try this
process (all 4 steps) three times before posting.  I am now running
off Ubuntu 6.06 live while doing research on this machine.  All
passwords associated with this machine have been changed.

Again, I am open and receptive any and all comments/constructive
criticism regarding this situation.

FWIW, the affected platform is an Intel PIII running Fedora Core 1 -
which (almost) obviously should have been upgraded a long time ago.

- Scott.

On 11/15/06, Scott Elcomb <psema4-Re5JQEeQqe8AvxtiuMwx3w at public.gmane.org> wrote:
> I'm certainly open to any ideas.  Here's what I know so far:
>
> #1 - On boot, non-root user id/passwd that has been in use for > 1
> year is not working.
>
> #2 - Using a virtual console, login as root and running passwd for the
> workstation id, changed passwd for workstation id.
>
> #3 - New password does _not_ work for associated id.
>
> #4 - New password _does work_ for root.
>
> I am assuming this workstation is compromised, and until resolved I
> will be using other hardware(s) available to me.  Any suggestions,
> ideas, thoughts would be welcome.  I really don't know how (!?!) this
> workstation could have been influenced by outside forces since I'm
> fairly certain of the integrity of at least 3 layers of security
> between this workstation and the internet.  This includes firewall's
> and routers.
>
> --
> Scott Elcomb
> http://atomos.sourceforge.net/
> http://search.cpan.org/~selcomb/SAL-3.03/
> http://psema4.googlepages.com/
>
> "They that can give up essential liberty to obtain a little temporary
> safety deserve neither liberty nor safety."
>
>   - Benjamin Franklin
>
> '"A lie can travel halfway around the world while the truth is putting
> on its shoes."
>
>   - Mark Twain
>


-- 
Scott Elcomb
http://atomos.sourceforge.net/
http://search.cpan.org/~selcomb/SAL-3.03/
http://psema4.googlepages.com/

"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."

  - Benjamin Franklin

'"A lie can travel halfway around the world while the truth is putting
on its shoes."

  - Mark Twain
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists