From owner-freebsd-hackers  Mon Jun 24 00:36:38 1996
Return-Path: owner-hackers
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id AAA01287
          for hackers-outgoing; Mon, 24 Jun 1996 00:36:38 -0700 (PDT)
Received: from einstein.technet.sg (ngps@einstein.technet.sg [192.169.33.50])
          by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id AAA01282;
          Mon, 24 Jun 1996 00:36:29 -0700 (PDT)
Received: (from ngps@localhost) by einstein.technet.sg (8.7.3/8.6.9) id PAA17929; Mon, 24 Jun 1996 15:35:02 +0800 (SST)
Date: Mon, 24 Jun 1996 15:35:01 +0800 (SST)
From: Ng Pheng Siong <ngps@technet.sg>
To: Terry Lambert <terry@lambert.org>
cc: "Jordan K. Hubbard" <jkh@time.cdrom.com>, guido@gvr.win.tue.nl,
        hackers@FreeBSD.ORG, security@FreeBSD.ORG, ache@FreeBSD.ORG
Subject: Re: I need help on this one - please help me track this guy down!
In-Reply-To: <199606240651.XAA27306@phaeton.artisoft.com>
Message-ID: <Pine.OSF.3.91.960624152743.32448I-100000@einstein.technet.sg>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-hackers@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

On Sun, 23 Jun 1996, Terry Lambert wrote:
> 1)	Do not believe this.  Assume he got root.

Fundamental question: how did the intruder get in? Telnet with reuseable
passwords, or something else?

Note that the intruder is probably reading these lists. ;)

- PS
--
Ng Pheng Siong <ngps@pacific.net.sg> * Finger for PGP key.
Pacific Internet Pte Ltd * Singapore

Fast, secure, cheap. Pick two.