RE: My pebble box has been hacked

Thanks very much!
 

-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Matt Westervelt
Sent: Tuesday, August 09, 2005 12:10 PM
To: SeattleWireless Development List
Subject: Re: My pebble box has been hacked

I suggest wiping your OS and starting over.   The likely culprit here is 
the old binary of ssh that pebble .41 ships with.

Check out http://metrix.net/support/ for an updated Pebble that includes a
web interface, updated drivers and binaries, etc.

-matt


John Benjamin wrote:

> Apologies if this is OT.  For more than a year I have had a soekris 
> board running Pebble .41 in a local coffee shop.  All has been grand 
> until this afternoon.  When I logged I was greeted by this:
>  
> --------------------------------------------------------
>      _  _    ____              _____      ____      
>    _| || |_ |  _ \  ___    ___|_   _|___ |  _ \  ___
>    |_  ..  _|| |_) |/ _ \  / _ \ | | / _ \| |_) |/ __|
>    |_      _||  _ <| (_) || (_) || ||  __/|  _ < \__ \
>    |_||_|  |_| \_\\___/  \___/ |_| \___||_| \_\|___/
>                                                    
>   _____  _____     _     __  __
>  |_   _|| ____|   / \   |  \/  |
>    | |  |  _|    / _ \  | |\/| |
>    | |  | |___  / ___ \ | |  | |
>    |_|  |_____|/_/   \_\|_|  |_|
>  
>  --------------------------------------------------------
> SySTem HaCkEd By #RooTeRs Team ! UnDerNEt ! this very very unSeCuReD 
> SeRvEr GrEeTiNgS To |LaUr| ! Storm4u & oRiCaRe !
> --------------------------------------------------------
>  
> The file system looks to be intact and the functionality of the box 
> seems fine.
>  
> I found the only changes / additions to the file system in /etc with 
> the files: resolv.conf, group & motd having date stamps of a few days
> ago.  The motd file has the above ascii graphics and message.   I dont 
> see any other traces of what else these folks might have done, but I 
> am not sure I really know what to look for or where to look.    Has 
> anyone else had this happen to them?  I'm not fluent in *nix so I have 
> a lot to learn and would appreciate any assistance on figuring this out.
>  
> Thanks,
> John
>  
>  
>  
> *cavu* n*etworks*
> **
>  
>
>-----------------------------------------------------------------------
>-
>
>_______________________________________________
>Dev mailing list
>[email protected]
>http://seattlewireless.net/mailman/listinfo/dev
>  
>

_______________________________________________
Dev mailing list
[email protected]
http://seattlewireless.net/mailman/listinfo/dev

_______________________________________________
Dev mailing list
[email protected]
http://seattlewireless.net/mailman/listinfo/dev