i only figured something was wrong when my bandwidth and processor usage kept spiking. i did run top, but i didn't notice anything out of the ordinary. i ran "lsof | grep ESTABLISHED" to see what was connected to what, and that's how i figured out what ports to tcpdump. to get rid of it, i just removed the compromised account.
as far as how they got in... have you ever looked at your ssh auth logs? i had a stupid username/password combo. i've noticed an increase in brute force attacks whenever i used bit torrent. but... correlation != causation so i don't know for sure. of course, i'd still get attacked even if i wasn't using bit torrent. i got tired of the attacks (which really takes a toll on my tibook) so i eventually just disabled ssh port forwarding on my router.
you can restore ssh logging using this hint and see for yourself.
i've had my computer compromized running a bot. i had a tcpdump showing it was reporting to a couple different IRC servers.
they got in through brute force attack on my ssh server. most likely they got in through my test account, username: test, password: test. i know.. ultra secure. but it was my fault for leaving the account enabled after finishing my troubleshooting. i doubt i'm the only os x user guilty of having a weak username/password with remote shell access.
Las Vegas has just installed an automated busway where the buses have drivers, but in reality, the bus does 99% of the driving with the driver just there "in case" (really just there so the people on board don't freak out over no human driver).
This will be the first I've heard of it, unless you meant the automated MONORAIL system. I'm pretty sure the buses here relies on human drivers. Trust me, with all the pedestrians jaywalking, junk strewn about on the streets, and an amalgamation of this country's (and the world's) drivers... I doubt a computer would be driving.
Maybe I'm wrong... but I can't find anything that implies otherwise.
Slashdot Mirror
not disagreeing with you on any of that, but, if i recall correctly, if you're running bittorrent, you're doing both downloading AND uploading.
/me shrugs
heh.. refresh. something was up with the css for a bit there. i noticed in the source:
<script src="javascripts/prototype.js" type="text/javascript"></script>
<script src="javascripts/moo.dom.js" type="text/javascript"></script>
<script src="javascripts/moo.fx.js" type="text/javascript"></script>
<script src="javascripts/moo.fx.pack.js" type="text/javascript"></script>
<script src="javascripts/common.js" type="text/javascript"></script>
no scriptaculous? for shame...
run on os x?
i'm sure you can find an illustrated guide on the internets.
well.. let's see...
the black does have a bigger hard drive. i don't think $150 bigger but... the color/finish isn't the only difference.
i only figured something was wrong when my bandwidth and processor usage kept spiking. i did run top, but i didn't notice anything out of the ordinary. i ran "lsof | grep ESTABLISHED" to see what was connected to what, and that's how i figured out what ports to tcpdump. to get rid of it, i just removed the compromised account.
as far as how they got in... have you ever looked at your ssh auth logs? i had a stupid username/password combo. i've noticed an increase in brute force attacks whenever i used bit torrent. but... correlation != causation so i don't know for sure. of course, i'd still get attacked even if i wasn't using bit torrent. i got tired of the attacks (which really takes a toll on my tibook) so i eventually just disabled ssh port forwarding on my router.
you can restore ssh logging using this hint and see for yourself.
sorta like the philip k. dick android that, ironically enough, seems to have escaped from the grasp of its makers...
i've had my computer compromized running a bot. i had a tcpdump showing it was reporting to a couple different IRC servers. they got in through brute force attack on my ssh server. most likely they got in through my test account, username: test, password: test. i know.. ultra secure. but it was my fault for leaving the account enabled after finishing my troubleshooting. i doubt i'm the only os x user guilty of having a weak username/password with remote shell access.
... you really just wasted your time by logging out.
i know this is a joke, but, technically speaking, there really should be a net effect. unless president bush has recently abolished newtonian physics.
:) this basically continues the sentiment of the GP
also, a good anagram for slimey .. uh.. if you ignore the extra e ;)(TM)
funny... this should be modded 'redundant'. it would be perfect.
haven't figured out how to change the toggle key yet, eh?
THIS is what's next.
imagine getting credit for itunes music for torrenting itunes music... what fun.
apparently, they thought he did well enough...
i found the winning play on youtube here. interesting. i didn't watch the original broadcast, so the RBI version was the first i'd seen it :P
yourtube-myspace.com ?
indeed... first time i've seen this troll modded +5 funny in a while....
:D i came in here to same the same exact thing. good on you!
Maybe I'm wrong... but I can't find anything that implies otherwise.
it doesn't prevent you from doing anything... it enables you to install os x on the chipped x86 machine.
i'm sure it wouldn't be too hard to dig up his slashdot UID, either.