[cobalt-security] Re: Raq3 hacked (was:Support for Cobalt Products)

["Audric Leperdi" <aleperdi@xxxxxxxxxxxxx>]

----- Original Message -----
From: "Hung Huynh" <hung@xxxxxxxxxxxx>
Sent: Wednesday, June 28, 2000 2:23 AM
Subject: Re: Support for Cobalt Products (Was: Re: [cobalt-security] kernel
corrupted!)


> Well said. I was lucky to get to talk to a tech support guy(Jason) the
first
> time I called. He said my RAQ3i box was hacked(without giving any reasons
on how
> it was hacked), and asked me to purchase a restored CD. That was all he
could
--------8<-------------[snip]--------8<-------------

In order to keep some relevance to this list (security) I have a question.
What happened to Hung Huynh happend to me as well.

Had 3 swatch_***_defcon2 alerts.

Cobalt support said my RaQ was compromised and had to restore it.
I was a little luckier because they sent me the restore-cd right away free
of charge.

I still need to know what happened?
What has been hacked and how?
What can I do so that it won't happen again?

anyone can decrypt swatch alerts?

thanks

Audric Leperdi
CIO - evolutiva srl
Via Varallo, 30 -10153 - Torino - Italy
tel +39 011 8121617 - fax. +39 011 8121614
www.evolutiva.com