Re: [Offtopic] Russian Hacker

Alan Cox (alan@lxorguk.ukuu.org.uk)
Fri, 3 Jan 1997 20:41:36 +0000 (GMT)


> Statically is best. To prevent sh*t like this from happening, I've
> recompiled all my (similar) daemons statically....

Good now when you install security fix to your libc you can recompile the
lot each time.

> # > The first thing he/she/it did was downloading two files named:
> # > my_lib and my_library.so (attached).

Get a current netkit (NetKit9 by preference)

> # > NOW MY QUESTION IS HOW DID HE GET THE PASSWORD? Maybe with my_lib* ?
> # > May someone have a look at this files, please and mail me his comment?

Used the my_lib* and a bug in the old ld.so and telnetd to get a shell
run as root instead of the login binary

Alan