From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1IY4LT-0008Gk-00 for garchives@archives.gentoo.org; Wed, 19 Sep 2007 18:32:19 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.14.0/8.14.0) with SMTP id l8JINBtT011949; Wed, 19 Sep 2007 18:23:11 GMT Received: from alnrmhc12.comcast.net (alnrmhc12.comcast.net [204.127.225.92]) by robin.gentoo.org (8.14.0/8.14.0) with ESMTP id l8JIIuVW007208 for ; Wed, 19 Sep 2007 18:18:56 GMT Received: from spore.ath.cx ([24.245.14.14]) by comcast.net (alnrmhc12) with ESMTP id <20070919181854b1200m33jje>; Wed, 19 Sep 2007 18:18:54 +0000 Received: from pascal.spore.ath.cx (pascal.spore.ath.cx [192.168.1.100]) by spore.ath.cx (Postfix) with ESMTP id CB8B489EB6 for ; Wed, 19 Sep 2007 13:18:53 -0500 (CDT) Date: Wed, 19 Sep 2007 13:18:53 -0500 From: Dan Farrell To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Hacked by association? Message-ID: <20070919131853.5f817b31@pascal.spore.ath.cx> In-Reply-To: <49bf44f10709191109x58494aa3n3182cea59553d510@mail.gmail.com> References: <49bf44f10709191109x58494aa3n3182cea59553d510@mail.gmail.com> Organization: Spore, Ltd. X-Mailer: Claws Mail 2.9.1 (GTK+ 2.10.13; x86_64-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Archives-Salt: 30470f32-2366-4bdd-9c29-b87c486ddce0 X-Archives-Hash: 42009b0705f3e92c872300ea983030e2 On Wed, 19 Sep 2007 11:09:30 -0700 Grant wrote: > Last night my host sent out a message that their database had been > compromised. I contacted them this morning and it turns out that all > of their trouble tickets were exposed. I checked my records and > (stupidly) I had included my root password in an email to them about a > year ago. I (stupidly) hadn't changed the password since. I've > changed it now and rebooted the system, but what do you think? Do I > need to start this thing over? > > - Grant I think you should take a look at the programs that are running, and netstat -l, and see if anything is fishy. -- gentoo-user@gentoo.org mailing list