Newsgroups: comp.security.unix Subject: Re: HELP - MSU's BSD systems intruded - all systems crashed Message-ID: From: dholland@husc7.harvard.edu (David Holland) Date: 2 Apr 94 02:51:46 Organization: irrelevant decello@discovery.uucp's message of 1 Apr 1994 23:15:12 GMT said: > Someone apparently rebooted every single BSD system on campus in the > 35.8.0.0 network. Anyone have an idea of what tools I could use to > monitor this type of unauthorized access. Sounds like a problem with /dev/backhoe to me. You may want to search the campus for a poorly-installed /usr/bin/construction-worker. (What the heck, it's still April 1 on the West Coast...) -- - David A. Holland | "The right to be heard does not automatically dholland@husc.harvard.edu | include the right to be taken seriously."