Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 24 Jan 2002 20:11:55 -0800 (PST)
From:      Tom Samplonius <tom@sdf.com>
To:        Jeff Lasman <jblists@nobaloney.net>
Cc:        freebsd-isp@freebsd.org
Subject:   Re: using jail in a shell-account environment
Message-ID:  <Pine.BSF.4.05.10201242000160.9032-100000@misery.sdf.com>
In-Reply-To: <3C50DB97.B8C201D3@nobaloney.net>

next in thread | previous in thread | raw e-mail | index | archive | help

On Thu, 24 Jan 2002, Jeff Lasman wrote:

> We've found a lot of our clients and prospects who would like
> shell-accounts.  A quick search of many search engines shows that almost
> no-one who offered them does anymore, presumably for good reasons.

  It has been my experience that people use shell accounts for:

- IRC bots to hold channels.  Or possibly to abuse channels.  It doesn't
really matter which, since you will soon tire of your Internet connection
from being taken down by floods designed to dislodge those bots from said
channels.

- Running IRC servers.  Same problem as the bots.

- File services.  Usually to distribute warez.  You should probably be
aware of your legal liability under the DMCA, to respond to known
unauthorized distribution.  So if you are aware, but don't act, you go to
jail too.

- Sharing with friends.  Before you know it, 25 people are using each
account with logins from all over the world.

- Testing rootkits and scripts.  Every newbie script kiddie will test
his/her new find in her/his shell account.  Even if the customer isn't a
script kiddie, he/she will have a friend somewhere that is.  Don't wait
until the shell account has been used to hack a few boxes at NASA, and the
FBI is serving you with a search warrant.


Tom


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.10201242000160.9032-100000>