[vox] password stolen at linuxworld
Bill Kendrick
vox@lists.lugod.org
Sun, 10 Aug 2003 08:14:58 -0700
On Sun, Aug 10, 2003 at 04:26:57AM -0700, Ryan Castellucci wrote:
>
> Someone at linux world seems to have gotten ahold of my ssh user password
> from when I used it at linuxworld.
<snip>
>
> I suspect that my password was either sholder surfed (unlikely, it'd be hard
> to memorize....) or someone was runnning man-in-the-middle attacks, and
> forced an SSHv1 session to prevent a warning, simply prompting for a new key.
Ouch! Is this something any of the rest of us LWE volunteer folks need to
worry about? (I logged into my sonic account numerous times from LWE;
mostly from Melissa's laptop, but also occasionally from other people's
laptops, I _think_... it's all such a blur)
Sorry this happened. :(
-bill!
--
bill@newbreedsoftware.com Got kids? Get Tux Paint!
http://newbreedsoftware.com/bill/ http://newbreedsoftware.com/tuxpaint/