l i n u x - u s e r s - g r o u p - o f - d a v i s
L U G O D
 
Next Meeting:
January 6: Social gathering
Next Installfest:
TBD
Latest News:
Nov. 18: Club officer elections
Page last updated:
2003 Aug 10 18:06

The following is an archive of a post made to our 'vox mailing list' by one of its subscribers.

Report this post as spam:

(Enter your email address)
Re: [vox] password stolen at linuxworld
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [vox] password stolen at linuxworld



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sunday 10 August 2003 08:11 am, Rod Roark wrote:
> On Sunday 10 August 2003 04:26 am, Ryan Castellucci wrote:
> > ...
> > I suspect that my password was either sholder surfed (unlikely, it'd be
> > hard to memorize....) or someone was runnning man-in-the-middle attacks,
> > and forced an SSHv1 session to prevent a warning, simply prompting for a
> > new key.
>
> It's likely the problem is much more widespread than just
> your passwords.  Did you use the machines installed at LWE
> for Net access?  It's not hard to imagine that someone was
> logging keystrokes.

No, I only used my laptop.

> It may be wise to contact the LWE coordinators, and the
> attacker's IP block owner (claremont.edu).

Done and done.

- -- 
PGP/GPG Fingerprint: 3B30 C6BE B1C6 9526 7A90  34E7 11DF 44F3 7217 7BC7
On pgp.mit.edu, import with `gpg --keyserver pgp.mit.edu --recv-key 72177BC7`
Also available at http://www.cal.net/~ryan/ryan_at_mother_dot_com.asc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/NukyEd9E83IXe8cRAq3bAKCr5sGwL1iPC1dkxBys6l8I/lAnxQCdHwq4
D0Ckwc2ye0+gUH6yWiEdkYQ=
=EQUu
-----END PGP SIGNATURE-----
_______________________________________________
vox mailing list
vox@lists.lugod.org
http://lists.lugod.org/mailman/listinfo/vox



LinkedIn
LUGOD Group on LinkedIn
Sign up for LUGOD event announcements
Your email address:
facebook
LUGOD Group on Facebook
'Like' LUGOD on Facebook:

Hosting provided by:
Sunset Systems
Sunset Systems offers preconfigured Linux systems, remote system administration and custom software development.

LUGOD: Linux Users' Group of Davis
PO Box 2082, Davis, CA 95617
Contact Us

LUGOD is a 501(c)7 non-profit organization
based in Davis, California
and serving the Sacramento area.
"Linux" is a trademark of Linus Torvalds.

Sponsored in part by:
O'Reilly and Associates
For numerous book donations.