Maybe a security problem involving Linux hosts Post: 302980273

Sponsored Content

Special Forums Cybersecurity Maybe a security problem involving Linux hosts Post 302980273 by SInt on Thursday 25th of August 2016 03:42:13 PM

08-25-2016

Registered User

Maybe a security problem involving Linux hosts

Hello,

with the following problem I feel helpless because I do not know where to look for the problem.
Sorry in advance for my poor English.

At some point the interaction with people on Freenode IRC has become mysterious and offending so that I checked my modem/router device. When I tried to make a change the modem gave me the error message that another admin is logged in. It alerted me because all other computers were disconnected. So I called my ISP and they agreed that my device is listed there at "being attacked". They sent me a replacement and they also sent me a new password.

With the new modem I booted a linux livecd that i got from a linux magazine. And from there I downloaded the ISOs and wiped all my machines using DBAN.

With all the people in my social environment telling me to relax, think positive and all that stuff like "its only your false perceiption on things" I stopped paying attention on mysterious errors, etc. Until I needed the Hexchat client to check a local ircd install. And it launched with 1 network added. I am absolutely sure I had 0 networks in that network list when I went on an IRC break. Several months before there was a similar thing where all 18 or 19 networks had their name changed to EF-Net.

Another thing is that I stored all my website passwords in Lastpass and when I went offline for 3 days to install and configure some things my passphrase was changed to the one I used several months ago and all my stored passwords were deleted.

I could provide several more of these stories.

I hope none of you guys reacts now how most people reacted: "this guy is crazy, give him more meds" or something. I know it sounds crazy and it is crazy. But lets say my observations are correct where could the entry point be for an attacker?

friendly Greetings,
SInt

SInt

View Public Profile for SInt

Find all posts by SInt

6 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

remote hosts access problem on solaris

hey guys, i am on a box named pluto and i need to be able to log into another box named genesis. i need to be able to ssh into genesis as root and not get asked for the password. what file do i need to edit on genesis to make this happen? i searched for the .rhosts file it doesn't seem to exist....

2. UNIX for Dummies Questions & Answers

problem in script involving month arithmetic

advance happy new year to all, i am having a script.The purpose of the scripts is as follows.If the current month is march,june,september or december ,inc_flg should be set to '1' otherwise inc_flg should be set to '2' month= date +"%m" if || || || ; then inc_flg = 1 else ...

3. Programming

A challenging problem involving symbolic links.

Hello, I'm working on an application that bridges together several applications involved in creating a video workflow for editing with digital cinema cameras. The main platform is MacOSX. Because of the nature of some of the utilities for working with this video footage I must spoof filenames...

4. Shell Programming and Scripting

problem feeding netcat a list of hosts

Hi, I'm having difficulty in making a bash script to get netcat to scan a list of hosts and their ports from another file and could use some help. Here's an example host list, "nc.host": 192.168.2.110 22 And here's the first script I tried to feed "nc.host" into netcat: "nc1.sh" ...

5. Shell Programming and Scripting

Problem in expect script with password involving trailing backslash

Hi all, I have wriiten an expect script that genearates a public private key pair through ssh-keygen and then copies that key to the authorized keys file of the remote system . The problem i am facing is when i get a password for the remote machine containg a trailing backslash , the send command...

6. Solaris

How to copy a tar file on a series of remote hosts and untar it on those hosts?

Am trying to copy a tar file onto a series of remote hosts and untar it at the destination. Need to do this without having to do multiple ssh. Actions to perform within a single ssh session via shell script - copy a file - untar at destination (remote host) OS : Linux RHEL6

LEARN ABOUT DEBIAN

baycom

BAYCOM(9)						      Kernel Reference Guide							 BAYCOM(9)

NAME

       baycom - amateur (AX.25) packet radio network driver for baycom modems

SYNOPSIS

       #include <linux/baycom.h>
       #include <linux/hdlcdrv.h>

DESCRIPTION

       The driver currently supports three different modems: ser12, par96 and par97.

   ser12
       This  is a very simple 1200 baud AFSK modem. The modem consists only of a modulator/demodulator chip, usually a TI TCM3105. The computer is
       responsible for regenerating the receiver bit clock. The modem connects to a serial port, hence the name. Since the serial port is not used
       as  an  async serial port, the kernel driver for serial ports cannot be used, and this driver only supports standard serial hardware (8250,
       16450, 16550).

   par96
       This is a modem for 9600 baud FSK compatible to the G3RUH standard.  The modem does all the filtering and regenerates the  receiver  clock.
       Data  is transferred from and to the PC via a shift register.  The shift register is filled with 16 bits and an interrupt is signalled. The
       PC then empties the shift register in a burst. This modem connects to the parallel port, hence the name.

   par97
       This is a redesign of the par96 modem by Henning Rech, DF9IC. The modem is protocol compatible to par96, but uses only three low power  ICs
       and can therefore be fed from the parallel port and does not require an additional power supply.

IOCTL CALLS

       The ioctl calls follow the implementation in the hdlcdrv.

       BAYCOMCTL_GETMODEMTYPE
	      returns the modem type (i.e. ser12 or par96) and the options in effect (currently only the source of the DCD signal)

       BAYCOMCTL_SETMODEMTYPE
	      sets the modem type and the options. Only superuser can do this.

       BAYCOMCTL_GETDEBUG
	      return some debugging values. Not always available.

SEE ALSO

       baycom (9), soundmodem (9), linux/drivers/net/hdlcdrv.c,

AUTHOR

       baycom was written by Thomas Sailer, HB9JNX/AE4WA, (t.sailer@alumni.ethz.ch).

Linux 2.1.x							  2 October 1996							 BAYCOM(9)