Am 2005-07-14 13:32:08, schrieb /dev/rob0:
> You might want to reconsider, then. You could have your CGI add the 
> records to PostgreSQL.

After reading the DZL I think, it is better.  :-)
But it seems that I have to rename some of my colums.

> I don't worry much about it. Sure, it's possible. Most successful 
> exploits I've seen target well-known services. Unless you have a real 

:-/  1,8 MByte of sshd.log per day... - I hate this dictionary attacks.

> I have rooted two Red Hat machines on behalf of their owners. It was 
> very easy both times. Both times, owners forgot the root passwords. 
> First time, the root password was the name of the company who sold it. 

@ROTFL@

> My first guess! Second time, shelled out of a proprietary binary which 
> was SUID. Duh. Took about a half hour to find that opening. And there 
> you have my entire cracking history ... about a half hour of real-time 
> experience. :)

:-/

> (Interesting aside: BOTH of these were running proprietary software. 
> Both of those packages were dreadfully insecure. The one where I guessed 
> the root password had something like "chmod a+rw /dev/*" in the rc.local 
> file as shipped by the vendor.)

I have seen such things too...

> > Now I am working since 6 years and 4 month with Linux
> > (since 2.0.36) and each day I have more fun.  :-)
> 
> I can relate. You and I started at about the same time. (But my Linux 
> Counter number is less than half of yours, so there. ;) )

I have registered in the end of 2002 I think because
before <http://counter.li.org/> was not known to me.  :-/

>      mail to this address is discarded unless "/dev/rob0"

:-)

Greetings
Michelle

-- 
Linux-User #280138 with the Linux Counter, http://counter.li.org/
Michelle Konzack   Apt. 917                  ICQ #328449886
                   50, rue de Soultz         MSM LinuxMichi
0033/3/88452356    67100 Strasbourg/France   IRC #Debian (irc.icq.com)

-- Attached file included as plaintext by Ecartis --
-- File: signature.pgp
-- Desc: Digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFC1s75C0FPBMSS+BIRAgdZAKCs66j5Mf/9VjpamIy0b1iJSHT75wCgtDns
xs6a71cX8wMNEa1BPiGUq0Q=
=iUf9
-----END PGP SIGNATURE-----