home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!munnari.oz.au!uniwa!craig
- From: craig@ec.uwa.oz.au (Craig Richmond - division)
- Newsgroups: comp.security.misc
- Subject: Re: Am I being hacked?
- Date: 15 Dec 1992 08:42:16 GMT
- Organization: The University of Western Australia
- Lines: 30
- Message-ID: <1gk5p8INN8i9@uniwa.uwa.edu.au>
- References: <1frfh9INNil3@network.ucsd.edu> <1992Dec7.163849.11779@Princeton.EDU>
- NNTP-Posting-Host: decel.ecel.uwa.edu.au
-
- subbarao@fc.hp.com (Kartik Subbarao) writes:
-
- >In article <1frfh9INNil3@network.ucsd.edu> mbk@lyapunov.ucsd.edu (Matt Kennel) writes:
-
- >Well, the /etc/passwd probably wouldn't be of any use, since it most likely
- >has '*'s in the place of the password. At least I hope so, in your case.
-
- I wanted to create a bogus password file with passwords like
-
- have
- you
- cracked
- every
- password
- yet
-
- so that you got a nice message when you unscrambled it after running crack
- on the password file :)
-
- Alternatively you set up a dummy account with a crackable password in the
- ftp passwd file and when the account is logged into, you record the IP,
- finger the machine and set of alarms on your local machine. That way, you
- catch the potential hackers.
-
- Craig
- --
- Craig Richmond. Computer Officer - Dept of Economics (morning) 380 3860
- University of Western Australia Dept of Education (afternoon)
- craig@ecel.uwa.edu.au Dvorak Keyboards RULE! "Messes are only acceptable
- if users make them. Applications aren't allowed this freedom" I.M.VI 2-4
-