Re: [cobalt-security] RaQ3 Hacked - Information Gathered

[Damian Gerow <dgerow@xxxxxxxxxxx>]

On Thu, Mar 08, 2001 at 11:05:08AM -0600, Administrator wrote:
> Recently, my Raq3 was hacked. I was able to get back into the system with
> the ROM boot method. I was able to determine that the kernel, among other
> things, was modified.  Additionally, the hacker left some information behind
> that might be of interest to someone.  My question is what do I do with the
> information gathered?  Is there some sort of central authority that tracks
> this information?  Does Sun / Cobalt want this information before I rebuild
> the OS?
> My apologies if I posted in the wrong list.
> -Todd S.

Try the "Incidents" mailing list, from SecurityFocus.  Actually, it would be
a good idea for all hack attempts/successes that have been flying around on
this list lately to be reported there.  The main focus of the list is to keep
a place where people can discuss break-ins and attempts, ask questions on how
to research more info, post new hacks, etc.

You can check out more information on the lists by going to
http://www.securityfocus.com, clicking the "Mailing Lists" link in the left
menu, then "Incidents".  Beware, it's a fairly high-volume list.