Rookit infections: AARRGH!

[Fred]

On Mon, 2005-05-09 at 20:21 -0400, Brian Chabot wrote:
...
> It's really frustrating that the worst I can do usually is terminate the 
> offender's account(s) on our system, report some to SpamCop, and send 
> info to the useless addresses like spam at uce.gov or whatever.
> 
> Sometimes you just wish you could reach through the lines and strangle 
> people.
> 
> Brian

How about making the lines come alive to strangle them when they do this
[fecal activity]?

At any rate, I appreciate the wealth of helpful tips here, and I have
decided to do thus:

1) Eliminate all passwords for login accounts unless said account is
also chrooted.

2) Keep ssh off of port 22 and use a different port. Also disable the V1
algorithm.

3) become a expert with iptables and use it with impunity.

4) sequester a handful of ICBMs to take care of any would-be cracker
that dares cross my path in the future. And the armed nuclear warheads
will be a mere courtesy detail. I'll look forward to meeting them in
future lifetimes -- where the fun really begins!

Just when I started making real money with my servers does this shit
have to happen. Do these idiot crackers realize I am feeding my family
and paying my mortgage off of this? Oh well, some will say that I'm to
blame, that I should've secured and locked down my servers before. Yeah,
I guess. But really. When I create the anti-death technology I long to
create in the future, I'll make sure the crackers will be excluded from
this benefit. Indeed, I'll make sure that the nanotechnology has a
built-in exclusion for crackers, and if anything it'll make them age
faster, not slower. In fact, the rate of increase of aging will be
directly proportional to the *square* of the number of machines they've
infected.

So, comma, if you ever see a person violently implode from a sudden
onslaught of old age, you'll know why. Gotcha, sucker! ;-)

> _______________________________________________
> gnhlug-discuss mailing list
> gnhlug-discuss at mail.gnhlug.org
> http://mail.gnhlug.org/mailman/listinfo/gnhlug-discuss