main

main@lists.alug.org.uk

10372 discussions

What to do after being hacked?
by Sagr 31 Aug '08

31 Aug '08

A friend of mine recently had a visit from "The Audisoft Hacker Team of Chilean Defacers" who, apart from replacing his website with graffiti, placed a c99shell backdoor in an obscure directory. His visitors were kind enough to display their hacker alias names on the graffiti and, looking at log files, we have discovered the time the attack occurred and the IP Address from which it came also, after having a poke around his backup files, think we know the application they hacked to gain entry. So what do we do now? I suppose theoretically he should report it to some authority but neither of us knows to whom, nor do we suspect they would show the slightest interest even if we did. The backdoor has been placed in an obscure location which would only be known by the original hackers and associates they have told. It would be impossible to guess or stumble upon accidentally. We are therefore confident that anyone who visits this backdoor has illegal intentions. So what would ALUGers suggest we do? Being in mind anyone who tries to accesses the backdoor has illegal intentions, and from log files we notice most are using Microsoft Internet Explorer, we have had all kinds of evil thoughts about replacing the backdoor with some kind of infected software... but this would bring us down to their level and possibly also be illegal. It would however be interesting to replace the backdoor webpage with some software which is capable of more detailed logging of visitors. What would more experienced ALUGers do if they were in our situation? Is there any specific piece of logging (or other) software ALUGers would suggest we replace the backdoor with as it is still receiving visitors? Sagr. PS: The application the hackers used to gain entry was an old piece of software he had forgotten was still on his website and so we haven't bothered to put it back on.

5 6

Nokia N810 - any experience?
by Chris G 31 Aug '08

31 Aug '08

I'm looking for some sort of GPS/PDA set up for logging walking/cycling and to provide directions for when I'm riding my motorbike. One suggestion is the Nokia 810 which is Linux based so that's an extra plus. Does anyone here have any experience of this device? For a start how big is it, I can't see this information in any of the adverts. -- Chris Green

7 11

How to automatically check for changes to a website
by Sagr 29 Aug '08

29 Aug '08

As ALUGers may be aware; a friend of mine recently had his website defaced by hackers. This has made me realise how seldomly I, myself, actually check my own website to see if it is still as it should be. Bearing in mind my own website is quite static, only being updated once a month or so, checking it would seem an ideal task for automation. I would guess I am not the only person on the planet who doesn’t have time to regularly check their website for defacement and was wondering if any experienced ALUGers could recommend a ready made script which I could run on my home server which would enable me to compare my live website (on a remote commercial webhost) with a stored image of it (on my local server) a couple of times a day. Do other ALUGers bother to check their own websites for defacement regularly? If so what tools do you use? Sagr.

6 5

IPTables and Me - they don't mix.
by Barry Samuels 29 Aug '08

29 Aug '08

My setup: Debian Testing (up to date) Kernel 2.6.24 My router has a firewall with the SSH port open. I run a FireStarter software firewall, which blocks SSH access, on my computer together with Knockd. Knockd runs a script which adds or deletes an IPTables rule to allow SSH access. The knockd script part works insamuch as it adds the required rule. The problem is that the firewall on my computer still blocks SSH access. This is so that I can access my computer when away from home and that's the only time I can test or try it consequently it's all rather long winded. SSH access is by key only and login is prohibited. First I added a rule to allow SSH access using the FireStarter GUI interface then I had a look at an IPTables listing to see what it had generated. I used that rule in my knockd script. The next time I went away I found that it didn't work - I still couldn't get access. The last rule I tried I had modified myself after reading the man pages and that didn't work either. So I'm now stumped. This is my last effort: iptables -A INPUT -p tcp --dport 22:22 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT iptables -A INPUT -p udp --dport 22:22 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT I don't know whether the UDP rule is required but I thought it wouldn't do any harm. If anyone can point out what I'm doing wrong I'd be most grateful. -- Barry Samuels http://www.beenthere-donethat.org.uk The Unofficial Guide to Great Britain

2 2

Mobile Linux, more thoughts and questions
by mark fernandes (IFR) 28 Aug '08

28 Aug '08

<UNLURK> I've got an Asus EEEPC (701) which I use with a 3G Mobile Broadband USB dongle (HUAWEI E220). I just used the add network wizard and followed the prompts and voila! it was setup. Works quite well (even on the train - Useful when stuck on Norwich to London line!). I have had minor problems with random disconnects but I suspect that this is to do with mobile coverage and contention. Works well enough for casual web-browsing and e-mail (which is what I use it for). Suspect may not be up for beefier things like iplayer etc. :-) Hope that this is helpful, Mark </UNLURK>

2 1

Mobile Linux, more thoughts and questions
by Chris G 27 Aug '08

27 Aug '08

Having looked at the Nokia N810 (reviews etc.) I've decided it probably doesn't offer the mix I really want. In particular it lacks phone capability (i..e. it has no SIM) so I'd need to carry a phone as well as the N810 which seems a bit silly. So I'm still kicking ideas around, I'm after GPS ability (for logging and for motorbike), a mobile phone and mobile computing which, for me, essentially boils down to being able to make an ssh connection through the mobile phone data connection. A browser for Googling would be nice but is less essential. I think this probably looks like several devices with a mobile phone and a data connection at the centre. Does anyone here use a mobile phone data connection with an Asus EEEPC, is it easy to set up and usable? If it was then it gives me a much nice keyboard for ssh than any keyboard on a smartphone or whatever. Alternatively a smartphone (like a Treo 680) with ssh installed would work too, much more difficult keyboard but more portable. Any other ideas, comments, etc. regarding getting a "terminal on a mobile phone" that's usable, portable and cheap? Once I've decided the neatest solution to the above I can add a GPS logger easily enough and I suspec the motorbike GPS navigation just ends up as a separate device. -- Chris Green

2 2

Re: [ALUG] Mobile Linux, more thoughts and questions
by James Elsey 27 Aug '08

27 Aug '08

What about the iPhone? I don't have one myself, but I hear there is quite a selection of applications for it, and it has built in GPS I'd be surprised if someone hasn't already figured out how to put linux on it... -----Original Message----- From: main-bounces(a)lists.alug.org.uk [mailto:main-bounces@lists.alug.org.uk] On Behalf Of Chris G Sent: 27 August 2008 14:47 To: main(a)lists.alug.org.uk Subject: [ALUG] Mobile Linux, more thoughts and questions Having looked at the Nokia N810 (reviews etc.) I've decided it probably doesn't offer the mix I really want. In particular it lacks phone capability (i..e. it has no SIM) so I'd need to carry a phone as well as the N810 which seems a bit silly. So I'm still kicking ideas around, I'm after GPS ability (for logging and for motorbike), a mobile phone and mobile computing which, for me, essentially boils down to being able to make an ssh connection through the mobile phone data connection. A browser for Googling would be nice but is less essential. I think this probably looks like several devices with a mobile phone and a data connection at the centre. Does anyone here use a mobile phone data connection with an Asus EEEPC, is it easy to set up and usable? If it was then it gives me a much nice keyboard for ssh than any keyboard on a smartphone or whatever. Alternatively a smartphone (like a Treo 680) with ssh installed would work too, much more difficult keyboard but more portable. Any other ideas, comments, etc. regarding getting a "terminal on a mobile phone" that's usable, portable and cheap? Once I've decided the neatest solution to the above I can add a GPS logger easily enough and I suspec the motorbike GPS navigation just ends up as a separate device. -- Chris Green _______________________________________________ main(a)lists.alug.org.uk http://www.alug.org.uk/ http://lists.alug.org.uk/mailman/listinfo/main Unsubscribe? See message headers or the web site above!

2 1

Routing table via DHCP on Fedora
by Dan Hatton 27 Aug '08

27 Aug '08

Dear All, The dhcp-options manpage says `NOTE to Fedora dhclient users: dhclient-script interprets trailing 0 octets of the target as indi- cating the subnet class of the route, so for the following static- routes value: option static-routes 172.0.0.0 172.16.2.254, 192.168.0.0 192.168.2.254; dhclient-script will create routes: 172/8 via 172.16.2.254 dev $interface 192.168/16 via 192.168.2.254 dev $interface' If I suspect that I'm getting a messed up routing table (i.e. not what the DHCP server administrator intended) as a result of this, what should I do to diagnose and/or fix it? -- Thanks, Dan

1 0

19" CRT Monitor, Free to a good home!
by Simon Elliott 27 Aug '08

27 Aug '08

Hello everyone, I've got a 19" Dell CRT Monitor... Don't have the space for it any more. It runs a pretty nifty 1280x1024, still in good working order and it's just sitting in my living room. My landlord wants me to get rid of it, anyone want it? http://www.flickr.com/photos/sionide/2801352124/ If you can come and collect it, you can have it! NR1 3AY, email me if you want it :)

1 0

EeePC battery runs down ...
by Ted.Harding＠manchester.ac.uk 23 Aug '08

23 Aug '08

Hi Folks, Knowing there are a few Eee PC owners out there, I'd like to compare notes on the following. I have a standard Eee PC 900 (Linux) with the standard ASUS battery. I've observed that if the machine is "powered off" (via the GUI: logoff -> shutdown) when the battery is fully charged, a few days later the battery may be substantially discharged (e.g. currently at 20%, on a previous occasion dead flat). Might this be due to slow internal leakage in the battery? Might the computer in fact be quietly ticking over in the background even though nominally "shut down"? Would a different battery make a difference? Just a few questions -- I'd be interested in what others think. With thanks, Ted. -------------------------------------------------------------------- E-Mail: (Ted Harding) <Ted.Harding(a)manchester.ac.uk> Fax-to-email: +44 (0)870 094 0861 Date: 23-Aug-08 Time: 18:09:03 ------------------------------ XFMail ------------------------------

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

main