Re: brute force ssh attack

From: Aleksandar Milivojevic (amilivojevic_at_pbl.ca)
Date: 04/28/05

  • Next message: Matthew Miller: "Re: brute force ssh attack" 
    Date: Thu, 28 Apr 2005 08:14:44 -0500
To: For users of Fedora Core releases <fedora-list@redhat.com>

    Matthew Miller wrote:
    > On Wed, Apr 27, 2005 at 10:56:38AM -0500, Aleksandar Milivojevic wrote:
    >
    >>>there are numerous brute force ssh attacks in the web.
    >>>I was quite curious, and for fun, I created the typical
    >>>user accounts and set easy to guess passwords....
    >>
    >>Generally, very bad idea. Unless you know exactly what you are doing,
    >>which you obviously don't.
    >
    >
    > What's the harm? I mean, assuming you're planning on doing a limited,
    > controlled experiment?

    Was it controlled? Was it really limited? Judging from original post,
    I wouldn't be suprised if his entire local network got infected.

    >>You don't just unplug network cable. You wipe off machine and reinstall
    >>it from scratch. Simple as that.
    >
    >
    > Sure. But it doesn't hurt to investigate what happened. It's educational.

    Sure, investigate. Learn. And then wipe off the harddrives. 

    -- 
Aleksandar Milivojevic <amilivojevic@pbl.ca>    Pollard Banknote Limited
Systems Administrator                           1499 Buffalo Place
Tel: (204) 474-2323 ext 276                     Winnipeg, MB  R3T 1L7
-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
  • Next message: Matthew Miller: "Re: brute force ssh attack"