[prev in list] [next in list] [prev in thread] [next in thread] 

List:       python-list
Subject:    Re: To whoever hacked into my Database
From:       Ned Batchelder <ned () nedbatchelder ! com>
Date:       2013-11-13 21:52:46
Message-ID: 70428667-9f8c-4cf7-9579-46d4813a2deb () googlegroups ! com
[Download RAW message or body]

On Wednesday, November 13, 2013 4:46:59 PM UTC-5, Ferrous Cranus wrote:
> root@secure:~/lib64# ls -al | grep libkey
> 
> lrwxrwxrwx 1 root root 20 Jun 22 2012 libkeyutils.so.1 -> 
> libkeyutils.so.1.3.0*
> -rwxr-xr-x 1 root root 10192 Jun 22 2012 libkeyutils.so.1.3*
> -rwxr-xr-x 1 root root 32920 Jun 22 2012 libkeyutils.so.1.3.0*
> 
> root@secure:~/lib64# rpm -qf libkeyutils.so.1.3.0
> file /lib64/libkeyutils.so.1.3.0 is not owned by any package
> 
> ================================
> 
> It appears that my server has been compromised with a malicious payload 
> designed to sniff for and steal server passwords.
> 
> This must have happened when i was handling my root passwords out in the 
> open.
> 
> Served me well.

This has nothing to do with the topic of this mailing list.  Please don't post it here.

--Ned.
-- 
https://mail.python.org/mailman/listinfo/python-list
[prev in list] [next in list] [prev in thread] [next in thread]