From owner-freebsd-security Fri Jun 20 14:47:33 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.5/8.8.5) id OAA26761 for security-outgoing; Fri, 20 Jun 1997 14:47:33 -0700 (PDT) Received: from hobbes.cuckoo.com (hobbes.cuckoo.com [206.109.5.43]) by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id OAA26753 for ; Fri, 20 Jun 1997 14:47:26 -0700 (PDT) Received: (from dbaker@localhost) by hobbes.cuckoo.com (8.8.5/8.8.3) id QAA26252; Fri, 20 Jun 1997 16:38:32 -0500 (CDT) From: Daniel Baker Message-Id: <199706202138.QAA26252@hobbes.cuckoo.com> Subject: Re: Attempt to compromise root To: jkh@time.cdrom.com (Jordan K. Hubbard) Date: Fri, 20 Jun 1997 16:38:28 -0500 (CDT) Cc: freebsd-security@FreeBSD.ORG In-Reply-To: <25515.866830848@time.cdrom.com> from "Jordan K. Hubbard" at Jun 20, 97 11:20:48 am X-Mailer: ELM [version 2.4 PL25] Content-Type: text Sender: owner-security@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk > > > I've tried ftp'ing to the.art.of.sekurity.org and have been successful > > only once, but haven't been able to transfer any files. sekurity.org > > appears registered to a organization called "Insekurity, Inc.". > > I've got the contents of the site mirrored now and I'll have a look > through some of it as I have time. It's possible that there are > some genuine compromises here, but it's hard to say. I attempted to do the same, and it appears that they are getting kinda paranoid from all the recent accesses: jeep % ftp the.art.of.sekurity.org Connected to the.art.of.sekurity.org. 220 the.art.of FTP server (Version wu-2.4(1) Tue Aug 8 15:50:43 CDT 1995) ready. Name (the.art.of.sekurity.org:dbaker): ftp 530- 530- 530- 530- It seems you have taken an interest in this machine 530- and/or its contents, if this is a general interest in the 530- domain sekurity.org you can send a request for service to 530- root@sekurity.org... If your interest is only in this machine 530- you can mail zen@sekurity.org... If you are specifically denied 530- access to this machine DO NOT WHINE ABOUT IT, I dont want to 530- listen to it... 530 User ftp access denied.. ftp: Login failed. Remote system type is UNIX. Using binary mode to transfer files. ftp> Intresting.... Daniel -- Daniel Baker (dbaker@cuckoo.com) Chief Technology and Executive Officer -- CuckooNet! (http://www.cuckoo.com)