Re: [cobalt-security] Qubes - hacked

[Harald Kapper <hk@xxxxxxxxxx>]

hi
my 2cents here:

I also saw recently a Q3 hacked (while it was not ours it was a not-yet-customer's one).

it basically had its firewall disabled (noone afterwards knew why :-))
and virtually everything was infected with ELF/Rst.B

which opens backdoors and this like.

anybody got an a) idea how it comes?
and b) if there is someone at sun that could make an educated analysis of logfiles
in order to show how / what happened?

thank you in advance
Harald Kapper, icq# 36178328         kapper.net, inc.
managing director                    loeblichgasse  6
chief software development           1090 vienna, .at
tel +43 1 3195500-0, fax +43 1 3195502, hk@xxxxxxxxxx