Re: man in the middle attack ?
Dear debian users,
First of all, thanks David and Phil,
> David <bo...cats@...>
> >On 21/08/2012, Phil Dobbin <bu...cat@...> wrote:
> >
> > I'd like to apologise for the abuse you have suffered at the hands of
> > certain members of this list. Uncalled for, rude & unhelpful.
>
> I agree. Attacking strangers might be a brief distraction from a bad
> day, or a sad life, but it is not the majority spirit here. Please
> ignore.
I am astonished for what happened. I'm sure it is just some exception.
I'm a debian user for a long time, I buy t-shirts and buttons, I
download and incentive my students to use it. I'm not moving away just
because of that. On the contrary, if the majority of the list is
friendly, so am I. Maybe there are moderators who could ask for who
doesn't fit to leave. Not me.
It is funny when a doctor asks for how to update a wifi driver, nobody
makes jokes. But talking about security, such bullies come. Why do
they feel the need to judge? "Hey, look how stupid that doctor is,
asking that! I'm no doctor and I know the answer!"
Yes, I'm a doctor, proud of it. It took me 5 years away from friends
and family, eating bread+eggs inside a lab. I passed uncountable
vacations, Christmas, family birthdays (and mine), alone in a freezing
room, studying, being judged by supervisors, and others. I'm 38, now.
If you want to judge me, maybe you can start by putting yourself on my
shoes.
People overestimate a Ph.D. As a biologist friend of mine said: you
keep studying more and more from less and less subject, until you know
everything of nothing. :)
So, forgive me my stupidity. I'll keep my email signature as it is, though.
Now, the technicality of the question:
After disconnecting the net cable, I realized the server was still up! :O
I logged with a innocuous account to read that that was the old server
which miraculous revived. Some intern from TI turned on the old server
and it took precedence over the new one. That explained the change of
the KEY.
The /var/log/auth.log shows:
Jun 20 14:17:01 zebu CRON[24183]: pam_unix(cron:session): session closed
Aug 20 10:16:23 zebu sshd[1301]: Server listening on port 22.
Mistery solved. I panicked and wrote you guys a message wondering what
would be an "immediate" action. Thank you
Jochen, Phil, David, Lina and Jerome, very much for your time and kind
attention.
Jerome, I'll read the link you suggested. I'm sure I'll learn a lot
from it. Security is definitely not my area, but I do my best to
administer this server. It is just a server where students may log in
using ssh, have some contact with the linux terminal, how to program
in C, and other languages, without the vicious from Windows
programming (like system("PAUSE") or include <conio.h>! argh!).
Although I have solved this case, if anyone feel like send any links
or tips on how to proceed in case of emergence, I'm willing to read
more.
Thanks,
Ruben Carlo Benante, Ph.D.
Doctor in Artificial Intelligence,
Master Degree in Philosophy.
Painter, Lousy Chess Player, Poet,
(among other things I can't recall right now)
PS. My biologist friend is Ph.D. in Yellow Butts Ants. Don't ask him
about Red Butts Ants: he knows nothing about them!
--
Dr. Beco
A.I. research, Cognitive Scientist and Philosopher
Linux Counter #201942
Reply to: