[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: "suspicious" apache log entries

----- Original Message -----

From: "Geoff Crompton" <geoff.crompton@bjhcontrols.com.au>

To: <debian-security@lists.debian.org>

Sent: Friday, September 13, 2002 1:42 AM

Subject: Re: "suspicious" apache log entries

>   I can see that sending an email is an approriate legal, and
>   responsible course of action.
>   However to make his servers beep, you still need to perform an illegal
>   act of cracking into his box. Regardless of what you intend to do when
>   you get in there, it is still unauthorized access to the computer. If
>   it is legal to crack a box for 'good' reasons, what do you think the
>   real crackers will say there were doing if they get caught?

Ok, we had some posts saying that getting into someone's box and

making some noise to get the admins attention is comparable with walking in

someone house, sitting on the owners sofa and waiting / leaving a note on

wall to tell him someone broke in - both is illegal unauthorized access.

Now that the owner is on holiday, his house is burning and my house is next
to him

I should call the fire brigade to at least protect my own house and the

- as I've seen someone who put the house on fire.

Writing emails to them did work up to now and the owner is still not
reachable too.

The police is not interested - because there is a border between my house

and the burning one. I should try to contact the police "over there".

Right, its a bit stupid to use such comparison - but its somehow fun too.

The person on holiday is just called "standard M$-certified admin".

>   Unless we could popularise running a 'alert-me-if-my-box-is-screwy'
>   daemon, which when it receives a message it beeps, displays a message,
>   and keeps beeping until an operator acks the message.

Even ISPs do not really care about beeping boxed. When I carried my first

4U-server to my ISP last year, I was really shocked. Tons of beeping
RAID-cards /

power-supplies. They never would hear mine. And its really not a small ISP

(I guess the smaller ones would be able to act properly).

IMO the only proper solution would be to notify the person mentioned in the

RIPE-handle / Domain-handle and hope that someone is going to react.

Everything else is playing fire- policeman. Or some kind of self protection.

>   Cheers
>   Geoff

best regards


Reply to: