I do not intend to sit quietly and keep my fingers
crossed.
SSHD attack, with the souce package hosted in Romainia, was one
attack vector - brute force account and password guessing.
Fail2ban, portsentry, et al, all do an okay job, but real log
checking, analysis, and ensuring proper information assurance
practices helps, but..
Alpha might slow things a little, but ... nothing is perfect.
thanks for the comment!!
bob
John Grzesiak wrote:
Just a quick note about being hacked... I have been doing IT since
about 1979
and Linux for a long time (since kernel 2.0.x)... I had never had any
hint of
an attack until FC9... I am wondering if there is something in the code
base
that is allowing this. At any rate, I am still looking for how my
apparent
penetration occured. (My SSHD on my gateway machine restarted without
an update
or coredump/error or other valid reason).
My older Fedora and CentOS machines appear unaffected... Just a
recommendation
to keep your eyes open and don't assume that just because it's an
Alpha, that
it's impervious... It's not.
--
===============================================
Mary, Patty and Lynn are brats, hmmm I know some brats.
|