[vox] Password NOT stolen at linuxworld

Dmitriy vox@lists.lugod.org
Mon, 11 Aug 2003 14:16:15 -0700


--3V7upXqbjpZ4EhLz
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Aug 11, 2003 at 01:42:08PM -0700, Ryan Castellucci wrote:
> OK, guys, here's the scoop... Somebody 0wned my system at
> work, running debian testing. Installed this lovely password

Testing is inherently insecure.  _Don't_ run testing on any publically
accessible computers.  It doesn't get security updates.

If you are lucky you will get one after a week.  If you are not, the update=
 can
range anywhere from two weeks (all conditions for going into testing are
satisiied and update is uploaded with normal urgency) to months (like
waiting for new glibc to go into testing).

So, I'd say you were asking to be 0wned.

[snip]

--=20
	GPG key-id: 1024D/DF04A255                 Dmitriy
	AA16 8FAB 74E1 3511 83D0  9F4B F087 CEC9 DF04 A255
	********* please encrypt all email to me *********

--3V7upXqbjpZ4EhLz
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/OAef8IfOyd8EolURAp0nAJ9c4DYOKZN/VXgSlG3YIC3zX0WtJACfXImM
fvzKQtDSfb5O2KutYPQZxqI=
=8mJx
-----END PGP SIGNATURE-----

--3V7upXqbjpZ4EhLz--