Re: [cobalt-users] Ok. I have been hacked and I have the .bash_history that shows how it was done

[David Lucas <david@xxxxxxxxxxxxxxxx>]

At 12:17 PM 2/22/2002, you wrote:
> This is great.  I have the complete transcript of what happened.  In the 
> .bash_history I have where the hacker went to get his tar.gz files and how 
> he/she used them.
>
> I downloaded all the tar.gz files that the hacker downloaded and I have 
> the yahoo account he/she used to mail files to.  So now what do I do?
>
> __________________


Restore the system back to an original state with a restore CD
Install all patches
Install security stuff, like ssh, ipchains, portsentry
Install a self-signed certificate or buy one
turn off telnet (use ssh)

Depends who will access the machine.
turn off ftp and use WinSCP2
use secure email