[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: Server Hacked

To: or-talk@xxxxxxxxxxxxx
Subject: Re: Server Hacked
From: "Jeffrey W. Baker" <jwbaker@xxxxxxx>
Date: Thu, 18 Aug 2005 23:48:11 -0700
Delivered-to: archiver@seul.org
Delivered-to: or-talk-outgoing@seul.org
Delivered-to: or-talk@seul.org
Delivery-date: Fri, 19 Aug 2005 02:48:14 -0400
In-reply-to: <43057978.2050508@ocf.berkeley.edu>
References: <43057081.4080005@ocf.berkeley.edu> <430574DA.9040005@walala.org> <43057978.2050508@ocf.berkeley.edu>
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx

On Thu, 2005-08-18 at 23:17 -0700, Brian C wrote:
> ADB wrote:
> > I doubt it. What services were/are you running? Did you use grsecurity
> > or SELinux?
> 
> I wasn't using either of those. I did run ... phpbb ... and probably
> some other things.

phpbb is probably the single most dangerous thing you can install on a
computer.  They should rename it "defaced".

Quite a leap to blame tor, although I can see how it might have
attracted attention.  It's much more likely that they found your phpbb
via Google.

-jwb

Follow-Ups:
- Re: Server Hacked
  - From: Brian C

References:
- Server Hacked
  - From: Brian C
- Re: Server Hacked
  - From: ADB
- Re: Server Hacked
  - From: Brian C

Prev by Author: Re: Still logged on after AIM logoff
Next by Author: Re: Strange log warnings
Previous by thread: Re: Server Hacked
Next by thread: Re: Server Hacked
Index(es):
- Author
- Thread