Forum Home
PC World Chat
 
Thread ID: 78409 2007-04-14 07:08:00 Why ChatF1 Is Offline Erayd (23) PC World Chat
Post ID Timestamp Content User
540969 2007-04-14 07:08:00 G'day all,

It appears that the ChatF1 server has been compromised. The server was broken into via ssh using a bruteforce password crack, and was then used as a platform to launch attacks against other machines. In the course of this, it ate up a LOT of personthingy's bandwidth.

ChatF1 is now offline until further notice while we secure the server.
Erayd (23)
540970 2007-04-14 07:09:00 Ouch. roddy_boy (4115)
540971 2007-04-14 07:35:00 And DO NOT LOOK AT ME! :annoyed:
I do not posses the skill to do such a thing
bob_doe_nz (92)
540972 2007-04-14 07:44:00 And DO NOT LOOK AT ME! :annoyed:
I do not posses the skill to do such a thing
We would never think that of you :eek::rolleyes:
Dannz (1668)
540973 2007-04-14 10:12:00 That's a bit rough. :horrified

Have you considering using SELinux on the server?
Jen (38)
540974 2007-04-14 10:14:00 SELinux would stop a brute force attack? (i have no experience with SELinux)
I know there are programs that stop a brute force attack.

We have decided to get ssh to do "callbacks"
(ie we click a button on a webpage, and this tells ssh to initiate a ssh tunnel to us, and we connect to the server via that. so nobody else can get in)
SSH wont be open to the internet anymore
Dannz (1668)
540975 2007-04-14 10:25:00 SELinux wouldn't stop a brute forced entry, but would contain what access the person had to other processes and services.

The UnOfficial SELinux FAQ (www.crypt.gen.nz).
Jen (38)
540976 2007-04-14 10:27:00 Looks interesting..
I have shied away from it, because i heard from people its more of a nuisance than a help, when people are trying to do things on their own machines it stops them. I tried it once, but gave up.
Dannz (1668)
540977 2007-04-14 10:31:00 Before we think ways to protect the server, I think we need to know why these insignificant, mindless and self-insufficient hackers finds it appropriate to waste their worthless lives on breaking into other people's property and do damage?

Seriously, what goes in the minds of these sad creatures we still call 'humans'?
qazwsxokmijn (102)
540978 2007-04-14 10:34:00 They find it fun i guess?
The satisfaction of knowing that you have cracked something, or knowing that you are going to annoy the heck out of who ever you cracked?

Or the brag factor "i hacked into X"
Dannz (1668)
1 2 3