Re: [cobalt-users] lastlog on RaQ3

[Jens Kristian Søgaard <jens@xxxxxxxxxxxxxxxxxxxx>]

Hi Kim,

> Does anyone know whether Cobalt intentionally encrypts var/log/lastlog?

They don't.

The logfile is not encrypted; it is however in binary form. This means, that
it will look unreadable to the human eye. It is however very readable for
programs on the server (i.e. the format is choosen to have save space, and
have faster processing of the file).

> My instinct tells me that they don't, and what seems to be an encrypted
> log is indeed evidence that someone hacked into my machine. Thanks.

Don't be paranoid.

--
Jens Kristian Søgaard, Mermaid Consulting I/S,
jens@xxxxxxxxxxxxxxxxxxxx,
http://www.mermaidconsulting.com/