Re: bash_history from Cracked Computer
Joey Hess wrote:
> Let's cut it down some..
>
> > cc anatomy.c -o anatomy
> > cc kod.c -o kofd
> > cp kofd kod
> > rm kofd
>
> According to google, kod and kofd are related to the oracle database.
> It's possible this is a cooincidence, or he was using these names to try
> to appear innocous (weird choices though; 'sh' is better..)
>
> It's odd he made them and immediatly deleted them -- unless he was
> logged in twice and went and used them in between.
looks to me like he mistyped (fat left index finger can
produce 'kofd' when you're trying for 'kod') and instead of
rename (mv) he did cp then rm.
not that this'll help much, but it might cut down on wild-goose
chasing...
Reply to: