[vox] password stolen at linuxworld

Bill Kendrick vox@lists.lugod.org
Sun, 10 Aug 2003 08:14:58 -0700


On Sun, Aug 10, 2003 at 04:26:57AM -0700, Ryan Castellucci wrote:
> 
> Someone at linux world seems to have gotten ahold of my ssh user password 
> from when I used it at linuxworld.
<snip>
> 
> I suspect that my password was either sholder surfed (unlikely, it'd be hard 
> to memorize....) or someone was runnning man-in-the-middle attacks, and 
> forced an SSHv1 session to prevent a warning, simply prompting for a new key.

Ouch!  Is this something any of the rest of us LWE volunteer folks need to
worry about?  (I logged into my sonic account numerous times from LWE;
mostly from Melissa's laptop, but also occasionally from other people's
laptops, I _think_...  it's all such a blur)


Sorry this happened. :(

-bill!

-- 
bill@newbreedsoftware.com                           Got kids?  Get Tux Paint! 
http://newbreedsoftware.com/bill/       http://newbreedsoftware.com/tuxpaint/