Re: [cobalt-users] "Sort of" hacked?? Raq3 with some problems...

[elmer@xxxxxxxxxxxxxx]

On Wed, 28 Feb 2001, Roger Dunk wrote:

} True. Someone with very little *nix experience isn't likely to be sucessful
} in manually restoring a box. But, how can you automatically assume that
} everyone who gets hacked and asks for help is totally clueless in this
} regard.

Hi Roger,

	My opinion is pretty simple and, trust me, I know exactly
what the 'Shadow' says about opinions...

	There's certainly no crime or malpractice in telling someone
who has to ask why they can't delete a binary when they are root, or
why the can't delete some tricked directories that the only safe way
to restore their server is via a fresh install. There very well may
be liability in telling them otherwise though.

	I will, however, not say it again. Though I know the
unhack.pl script wouldn't remove all the backdoors from the servers
I worked on, my responsibility is to our clients here and this is
not an income generating activity for me. So, well, have fun!