Re: My pebble box has been hacked
Matt Westervelt <[email protected]>
| Newsgroups | gmane.network.wireless.seattle.devel |
|---|---|
| Message-ID | <[email protected]> |
I suggest wiping your OS and starting over. The likely culprit here is the old binary of ssh that pebble .41 ships with. Check out http://metrix.net/support/ for an updated Pebble that includes a web interface, updated drivers and binaries, etc. -matt John Benjamin wrote: > Apologies if this is OT. For more than a year I have had a soekris > board running Pebble .41 in a local coffee shop. All has been grand > until this afternoon. When I logged I was greeted by this: > > -------------------------------------------------------- > _ _ ____ _____ ____ > _| || |_ | _ \ ___ ___|_ _|___ | _ \ ___ > |_ .. _|| |_) |/ _ \ / _ \ | | / _ \| |_) |/ __| > |_ _|| _ <| (_) || (_) || || __/| _ < \__ \ > |_||_| |_| \_\\___/ \___/ |_| \___||_| \_\|___/ > > _____ _____ _ __ __ > |_ _|| ____| / \ | \/ | > | | | _| / _ \ | |\/| | > | | | |___ / ___ \ | | | | > |_| |_____|/_/ \_\|_| |_| > > -------------------------------------------------------- > SySTem HaCkEd By #RooTeRs Team ! UnDerNEt ! this very very unSeCuReD > SeRvEr > GrEeTiNgS To |LaUr| ! Storm4u & oRiCaRe ! > -------------------------------------------------------- > > The file system looks to be intact and the functionality of the box > seems fine. > > I found the only changes / additions to the file system in /etc with > the files: resolv.conf, group & motd having date stamps of a few days > ago. The motd file has the above ascii graphics and message. I dont > see any other traces of what else these folks might have done, but I > am not sure I really know what to look for or where to look. Has > anyone else had this happen to them? I'm not fluent in *nix so I have > a lot to learn and would appreciate any assistance on figuring this out. > > Thanks, > John > > > > *cavu* n*etworks* > ** > > >------------------------------------------------------------------------ > >_______________________________________________ >Dev mailing list >[email protected] >http://seattlewireless.net/mailman/listinfo/dev > > _______________________________________________ Dev mailing list [email protected] http://seattlewireless.net/mailman/listinfo/dev