Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 15 Jun 2005 10:44:09 -0500
From:      Greg Barniskis <nalists@scls.lib.wi.us>
To:        "Dixit, Viraj" <Viraj.Dixit@CityofPaloAlto.org>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: commands "w" "who" & "finger"
Message-ID:  <42B04CC9.3070603@scls.lib.wi.us>
In-Reply-To: <A3114C5FA7BA8E4B8F20A198F89917503E767F@xiris.staff.copa>
References:  <A3114C5FA7BA8E4B8F20A198F89917503E767F@xiris.staff.copa>

next in thread | previous in thread | raw e-mail | index | archive | help
Dixit, Viraj wrote:
> No nothing was changed as far as I know. I usually log on as a super user through telnet and there are few others that I have also given access to as a super user. I have not tried the console yet, but what am I looking for. Thanks,

Urk. <squirm>

Logging in via telnet exposes your password in cleartext. If it 
wasn't another 'authorized' superuser who changed things, it could 
easily be that you've been cracked six ways from Sunday.

You should definitely reinstall from CD. It is very strongly 
recommended that you *always use SSH* for remote login, and that you 
don't give blanket superuser privileges to others -- give them 
discrete added privileges with sudo, and/or sink their accounts into 
a jail environment.

-- 
Greg Barniskis, Computer Systems Integrator
South Central Library System (SCLS)
Library Interchange Network (LINK)
<gregb at scls.lib.wi.us>, (608) 266-6348



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?42B04CC9.3070603>