Date: Thu, 19 Apr 2001 14:02:52 +0300 From: Peter Pentchev <roam@orbitel.bg> To: Dag-Erling Smorgrav <des@ofug.org> Cc: "David G. Andersen" <dga@pobox.com>, Kris Kennaway <kris@obsecurity.org>, fukuda shinichi <fukuda@alles.ad.jp>, freebsd-security@FreeBSD.ORG Subject: Re: unknown process Message-ID: <20010419140252.A454@ringworld.oblivion.bg> In-Reply-To: <xzp66g1npk9.fsf@flood.ping.uio.no>; from des@ofug.org on Thu, Apr 19, 2001 at 12:37:10PM %2B0200 References: <200104190324.VAA14081@faith.cs.utah.edu> <xzpzodd6xsh.fsf@flood.ping.uio.no> <20010419123915.A446@ringworld.oblivion.bg> <xzp66g1npk9.fsf@flood.ping.uio.no>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Apr 19, 2001 at 12:37:10PM +0200, Dag-Erling Smorgrav wrote: > Peter Pentchev <roam@orbitel.bg> writes: > > On Thu, Apr 19, 2001 at 11:31:26AM +0200, Dag-Erling Smorgrav wrote: > > > It's not either/or. The only acceptable solution to this situation is > > > a complete reinstall from a trusted source (e.g. original CD set). > > ..and during the install, examine your backups > > A backup is not a trusted source. Never reinstall from backups after > a compromise. Restoring user data from backup is acceptable as long > as you are certain that none of that data is executable. That's exactly what I said, wasn't it? :) Especially in my second message.. G'luck, Peter -- Thit sentence is not self-referential because "thit" is not a word. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010419140252.A454>