Monitoring tools to use on an account
in [Debian]
|
From: Mike Bird on 30 Jul 2010 12:40 On Fri July 30 2010 09:13:08 hugo vanwoerkom wrote: > This person knows nothing of commands or VT's so it was just internet > browsing activity. I would sure like to know what happened. How do you know that this person hasn't captured your passwords and/or keys, possibly by temporarily rebooting on a CD to gain root privileges? --Mike Bird -- To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org Archive: http://lists.debian.org/201007300930.28957.mgb-debian(a)yosemite.net
From: hugo vanwoerkom on 30 Jul 2010 12:50 Mike Bird wrote: > On Fri July 30 2010 09:13:08 hugo vanwoerkom wrote: >> This person knows nothing of commands or VT's so it was just internet >> browsing activity. I would sure like to know what happened. > > How do you know that this person hasn't captured your > passwords and/or keys, possibly by temporarily rebooting > on a CD to gain root privileges? > We're sidetracking again. I guarantee you that this person knows nothing about keys or capturing passwords or gaining root privileges. Remember we're in Mexico now stuck behind a Telmex gateway. It could be malicious intent on the part of external parties, but then it would happen when I am on and it never does. Solid system. Good broadband wireless connection with Lenny and gnome on an Acer Aspire laptop. But is there such a tool to trace what is being done in IW? Hugo -- To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org Archive: http://lists.debian.org/i2uvmv$h7l$1(a)dough.gmane.org
From: Mike Bird on 30 Jul 2010 13:20 On Fri July 30 2010 09:47:15 hugo vanwoerkom wrote: > Mike Bird wrote: > > On Fri July 30 2010 09:13:08 hugo vanwoerkom wrote: > >> This person knows nothing of commands or VT's so it was just internet > >> browsing activity. I would sure like to know what happened. > > > > How do you know that this person hasn't captured your > > passwords and/or keys, possibly by temporarily rebooting > > on a CD to gain root privileges? > > We're sidetracking again. I guarantee you that this person knows nothing > about keys or capturing passwords or gaining root privileges. It doesn't take a lot of technical knowledge to download and burn an attack CD. Remember this person has already surprised you with IIRC two reboots. It's unlikely you will be able to find out what happened after the event. Given physical access to the device, there's no way of guarantying that even a previous installed logger would report accurately - as for example if the system were temporarily rebooted on an attack CD. Perhaps by your friend. Perhaps when your friend left the system unattended. --Mike Bird -- To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org Archive: http://lists.debian.org/201007301013.49618.mgb-debian(a)yosemite.net
From: Klistvud on 30 Jul 2010 18:50 Dne, 30. 07. 2010 18:47:15 je hugo vanwoerkom napisal(a): > > But is there such a tool to trace what is being done in IW? > IW? For starters, I would check history (ctrl-h), so you can track what sites the person has been to. In my humble experience though, it's thermal shutdown. They played a flash game or two, and Iceweasel, combined with Flash, is notorious for ramping up CPU usage out of any proportion. Thermal shutdowns happen all the time when I let my kids play on my laptop. I sure hope Iceweasel/Flash will work better in Squeeze ... -- Regards, Klistvud Certifiable Loonix User #481801 http://bufferoverflow.tiddlyspot.com -- To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org Archive: http://lists.debian.org/1280529891.11286.0(a)compax
From: hugo vanwoerkom on 5 Aug 2010 12:40
Klistvud wrote: > Dne, 30. 07. 2010 18:47:15 je hugo vanwoerkom napisal(a): >> >> But is there such a tool to trace what is being done in IW? >> > > IW? For starters, I would check history (ctrl-h), so you can track what > sites the person has been to. In my humble experience though, it's > thermal shutdown. They played a flash game or two, and Iceweasel, > combined with Flash, is notorious for ramping up CPU usage out of any > proportion. Thermal shutdowns happen all the time when I let my kids > play on my laptop. I sure hope Iceweasel/Flash will work better in > Squeeze ... > I installed the latest flashplayer from Adobe and that fixed the problem. Who knows why people like facebook, that was the problem, its videos. And why did it bring down X? Who knows. Hugo -- To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org Archive: http://lists.debian.org/i3eo8p$p0j$1(a)dough.gmane.org |