[cobalt-users] Hackers. What's the problem?

["Dan Mahoney, System Admin" <danm@xxxxxxxxxxxxxxx>]

I've seen a LOT of info on this list concerning cobalt hacks.  My BIG
question that despite reading all of the emails I still can't get is:

Where is the insecurity?

No, I'm not trying to imply there isn't one.  I've had EIGHT cobalts
compromised to date, and I'd love to know which daemon is the cause of the
trouble.  Is it ftpd?  bind?  (which runs as root, and not in a
sandbox?).  I've seen mention of these two on the mailing list, but can
anyone for sure tell me what the real problem is?  So I have something to
tell all the people who aren't on the list who are asking me?

Much appreciated.

-Dan Mahoney

--

"One...plus two...plus one...plus one."

-Tim Curry, Clue

--------Dan Mahoney--------
Techie,  Sysadmin,  WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144   AIM: LarpGM
Web: http://prime.gushi.org
finger danm@xxxxxxxxxxxxxxx 
for pgp public key and tel#
---------------------------