Maybe a security problem involving Linux hosts Post: 302980283

Sponsored Content

Special Forums Cybersecurity Maybe a security problem involving Linux hosts Post 302980283 by Corona688 on Thursday 25th of August 2016 05:13:55 PM

08-25-2016

Registered User

Network intrusion happens often enough that they almost certainly weren't after you personally. It's like email spam -- attackers probe thousands of systems hoping to find one easy catch. Did you ask your ISP how many other modems were under attack? For an ISP to even admit that their modems are being attacked hints at a large problem.

When did you lose your LastPass passwords? LastPass has cleared and deactivated accounts by the million to deal with their own intrusion attempts. Once again, probably not personal.

Had HexChat needed to install any updates after not using it for months? Had you installed it from scratch after the big computer-bleach? Once again, probably not personal, just a default setting.

In short, I don't think you're crazy -- I think you have an unclear idea how computer software and computer networking works. These events have very little in common, unclear motivation (why would a hacker want to rename your IRC networks?), and very different methods(random issues in your local computer, vs malicious hacking of a well-known password service, vs intrusion on your ISP's WAN, etc...), too many for me to assume they're all from the same person or have you in particular in mind. Reformatting your computer because someone attacked your modem is akin to burning down your house because someone looked in your window, anyway.

Last edited by Corona688; 08-25-2016 at 06:25 PM..

This User Gave Thanks to Corona688 For This Post:

Corona688

View Public Profile for Corona688

Visit Corona688's homepage!

Find all posts by Corona688

6 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

remote hosts access problem on solaris

hey guys, i am on a box named pluto and i need to be able to log into another box named genesis. i need to be able to ssh into genesis as root and not get asked for the password. what file do i need to edit on genesis to make this happen? i searched for the .rhosts file it doesn't seem to exist....

2. UNIX for Dummies Questions & Answers

problem in script involving month arithmetic

advance happy new year to all, i am having a script.The purpose of the scripts is as follows.If the current month is march,june,september or december ,inc_flg should be set to '1' otherwise inc_flg should be set to '2' month= date +"%m" if || || || ; then inc_flg = 1 else ...

3. Programming

A challenging problem involving symbolic links.

Hello, I'm working on an application that bridges together several applications involved in creating a video workflow for editing with digital cinema cameras. The main platform is MacOSX. Because of the nature of some of the utilities for working with this video footage I must spoof filenames...

4. Shell Programming and Scripting

problem feeding netcat a list of hosts

Hi, I'm having difficulty in making a bash script to get netcat to scan a list of hosts and their ports from another file and could use some help. Here's an example host list, "nc.host": 192.168.2.110 22 And here's the first script I tried to feed "nc.host" into netcat: "nc1.sh" ...

5. Shell Programming and Scripting

Problem in expect script with password involving trailing backslash

Hi all, I have wriiten an expect script that genearates a public private key pair through ssh-keygen and then copies that key to the authorized keys file of the remote system . The problem i am facing is when i get a password for the remote machine containg a trailing backslash , the send command...

6. Solaris

How to copy a tar file on a series of remote hosts and untar it on those hosts?

Am trying to copy a tar file onto a series of remote hosts and untar it at the destination. Need to do this without having to do multiple ssh. Actions to perform within a single ssh session via shell script - copy a file - untar at destination (remote host) OS : Linux RHEL6

LEARN ABOUT DEBIAN

tigexp

TIGEXP(8)						      Administrator Commands							 TIGEXP(8)

NAME

       tigexp - UNIX Security Checker Explanation Generator

SYNOPSIS

       tigexp msgid [msgid[msgid...]]

       tigexp [-f|-F] [security_report]

DESCRIPTION

       Tigexp is used to generate explanations of the output from the Tiger security checking package.	In the first form, tigexp will generate an
       explanation of each of the message ids listed.  In the second form, the security report specified will be scanned and  explanations  gener-
       ated.  The -f option will generate one explanation for each unique message id in the security report, whereas the -F option will output the
       security report with explanations inserted after each entry in the report.

       There are five different message levels produced by Tiger. Each of the message levels is the last letter of the message id. The levels are:

       ALERT  A message of this level indicates that Tiger has detected a possible intrusion attempt or  troublesome  misconfiguration	which  can
	      expose the whole system to attacks.

       FAIL   Messages of this level indicate a violation of a generic security policy or a possible intrusion. Appropriate action should be taken
	      to fix this security issue.

       WARN   Messages of this level indicate a security issue which should be checked further and might  indicate  a  probable  vulnerability	or
	      exposure. Most Tiger messages appear in this category.

       INFO   These  includes  information messages which are not necessarily a security violation but might be useful for the administrator. Note
	      that the tigerrc configuration file through the Tiger_Show_INFO_Msgs option determines whether or not Tiger shows these  items.  The
	      default behaviour is to not show them.

       ERROR  These  messages are errors in the execution of Tiger (or any of its scripts), this is probably due to a misconfiguration in the pro-
	      gram, because of a problem in the installation or because a file needed for the test is missing. The script who outputs  this  error
	      should be investigated further.

       CONFIG Messages with this level inform of stages in the configuration process of Tiger. They are not errors (otherwise ERROR would be used)
	      but notices for the user running the program explaining, for example, which configuration might be used.

   OPTIONS
       -f     Scan the indicated security report and generate explanations of it.  One explanation will be generated for each unique message id in
	      the security report.  If the name of a security report is not given, then the report is read from stdin.

       -F     Output the indicated security report with explanations inserted after each entry in the report.  If the name of a security report is
	      not given, then the report is read from stdin.

FILES

       $TIGERHOMEDIR/doc/explain.idx

SEE ALSO

       tiger(8)

BUGS

       If the explanation index is out of date, it doesn't recognize it and generates junk.

Security							  12 August 2003							 TIGEXP(8)