Rudy Gevaert <[EMAIL PROTECTED]> said: > On Mon, Jun 09, 2003 at 05:04:00PM +0200, Mathieu Roy wrote: > > > > The server is back on line. > > I do wonder what could happened. Also I did a "last" and saw that the > user : > Login: BoW4IamTheBOFH Name: Brandon Grace > <[EMAIL PROTECTED]> > Directory: /home/BoW4IamTheBOFH Shell: /usr/local/bin/cvssh > Last login Sat Jun 7 20:21 (EDT) on pts/0 from > ip68-1-229-241.dl.dl.cox.net > No mail. > No Plan. > > Was logged in. What a strange loginname...
Strange, indeed. We should check carefully automated diff. If he cracked the computer, a worm may be there. He is admin of http://savannah.nongnu.org/projects/curphoo/ But I'm not sure that doing a simple scp/rsync not give a "last login" (CVS ssh does not, I'm sure). And he made an scp or rsync. He's login is strange but I suppose he's young. He's domain name is in the same spirit. Regards, -- Mathieu Roy Homepage: http://yeupou.coleumes.org Not a native english speaker: http://stock.coleumes.org/doc.php?i=/misc-files/flawed-english _______________________________________________ Savannah-hackers mailing list [EMAIL PROTECTED] http://mail.gnu.org/mailman/listinfo/savannah-hackers
