[Savannah-hackers] Re: Sv back on line

[Mathieu Roy]

Rudy Gevaert <address@hidden> said:

> On Mon, Jun 09, 2003 at 05:04:00PM +0200, Mathieu Roy wrote:
> > 
> > The server is back on line.
> 
> I do wonder what could happened.  Also I did a "last" and saw that the
> user :
> Login: BoW4IamTheBOFH                   Name: Brandon Grace
> <address@hidden>
> Directory: /home/BoW4IamTheBOFH         Shell: /usr/local/bin/cvssh
> Last login Sat Jun  7 20:21 (EDT) on pts/0 from
> ip68-1-229-241.dl.dl.cox.net
> No mail.
> No Plan.
> 
> Was logged in.  What a strange loginname...

Strange, indeed. We should check carefully automated diff. If he
cracked the computer, a worm may be there.

He is admin of
http://savannah.nongnu.org/projects/curphoo/

But I'm not sure that doing a simple scp/rsync not give a "last login" (CVS
ssh does not, I'm sure). And he made an scp or rsync.

He's login is strange but I suppose he's young. He's domain name is in
the same spirit.

Regards,

-- 
Mathieu Roy
 
  Homepage:
    http://yeupou.coleumes.org
  Not a native english speaker: 
    http://stock.coleumes.org/doc.php?i=/misc-files/flawed-english