On Mon, 2003-06-30 at 23:41, Russell Coker wrote: > On Mon, 30 Jun 2003 16:12, Donovan Baarda wrote: > > In then end it is nearly always easier to re-install than to just clean > > the system without it, even if the hacker did leave .bash_histories > > behind that show everything he/she did. > > Besides, just because a script-kiddie got in first does not mean that a > skilled and experienced person didn't follow them. Or maybe a skilled person > cracked the machine months or years before the script-kiddie...
I almost added that the .bash_history's could have been forged by a more skilled cracker to hide something more subtle... -- ---------------------------------------------------------------- Donovan Baarda http://minkirri.apana.org.au/~abo/ ----------------------------------------------------------------
