RE: [cobalt-users] "Sort of" hacked?? Raq3 with some problems...

[Rodolfo Paiz <rpaiz@xxxxxxxxxxxxxx>]

> 	I'm certainly not looking for an argument but I simply don't
> think that suggesting that someone who isn't comfortable and quite
> handy at the shell prompt can successfully unhack their server is
> something we ought to be doing.

Furthermore, I strongly suggest that the costs of fixing things *when*
you get hacked be factored into your business model as part of the
variable costs of doing business. People who cannot afford the fees to
reinstall their machine are guilty of (1) insufficient negotiation with
their suppliers and (2) insufficient planning for their business model.

Back up *before* you get hacked, and keep things recent. Then if you get
hacked, FORMAT THE HARD DRIVE(S) and reinstall from CD. Do not just try
to reinstall files... it is always harder to secure than to crack.

This is The Way It Is (tm), and the recent spate of hacks based on BIND
and ProFTPd should be a quick lesson. Get used to it. All boxes will be
hacked eventually. Not if, when.

--
Rodolfo J. Paiz
rpaiz@xxxxxxxxxxxxxx <mailto:rpaiz@xxxxxxxxxxxxxx>