Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 24 Jun 1996 10:41:26 +0100 (BST)
From:      Doug Rabson <dfr@render.com>
To:        "Jordan K. Hubbard" <jkh@time.cdrom.com>
Cc:        Amancio Hasty <hasty@rah.star-gate.com>, hackers@FreeBSD.org, security@FreeBSD.org, ache@FreeBSD.org
Subject:   Re: I need help on this one - please help me track this guy down!
Message-ID:  <Pine.BSF.3.91.960624104016.23553H-100000@minnow.render.com>
In-Reply-To: <8378.835580425@time.cdrom.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 23 Jun 1996, Jordan K. Hubbard wrote:

> > Also since "you" were logged in , try to look in the logs for a 
> > a loggin session of a foreign host and I would report the incident  to the
> > FBI 8)
> 
> All we have are the "last" logs, which show:
> 
> jkh       ttyp2    a235.pu.ru       Sun Jun 23 16:50 - 17:18  (00:28)
> jkh       ttyp3    a235.pu.ru       Sun Jun 23 15:00 - 15:34  (00:33)
> 
> If someone at the russian site could help correlate this time (PST) to
> the local time at wherever a235.ru.pu came in from, we could at least
> narrow down which user(s) it might have been.
> 
> Also, I think that calling the FBI on this one is only likely to get
> me put on infinite hold when they hear that the perpetrator is in
> Russia. :-)

Which parts of the archive do you have write access to?  It just occurred 
to me that inserting a virus into the release version of quake would be a 
far more devastating attack than tampering with a FreeBSD release.

--
Doug Rabson, Microsoft RenderMorphics Ltd.	Mail:  dfr@render.com
						Phone: +44 171 251 4411
						FAX:   +44 171 251 0939




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.91.960624104016.23553H-100000>