ssh checksum error

Patrick R. McManus mcmanus at ducksong.com
Wed May 1 09:42:13 EDT 2002


[Derek D. Martin: Tue, Apr 30, 2002 at 11:55:25PM -0400]
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Off list, someone asked me:
> > Two questions:
> > 
> > 1. Are there security tools that will tell if my machine has been
> > owned?
> 
> Yes, but they generally require that you use them BEFORE there's any
> possibility of your system being compromised (i.e. before it's been

I've found chkrootkit (http://www.chkrootkit.org/) helpful after the
fact. Negative reports (not cracked) are, of course, not to be
trusted in any install-after-the-fact pacakges, but I like how it will
give a quick positive to confirm any suspicions for most common cases.

-P





More information about the Discuss mailing list