[11421] in Hotline Meeting
Hacked workstation
daemon@ATHENA.MIT.EDU (joshua@Athena.MIT.EDU)
Fri Oct 23 15:24:26 1992
From: joshua@Athena.MIT.EDU
Date: Fri, 23 Oct 92 15:24:13 -0400
To: hotline@Athena.MIT.EDU
I am writing on the suggestion of an On-line consultant.
I am logged into M4-035-13, an RS6000 in the basement of bld. 4.
In an xterm window, without me typing anything, I got 2 messages:
access_on: Command not found.
all hosts being allowed (access control disabled)
It looked like someone was externally screwing around with my
terminal. So I re-enabled control access (xhost -), and turned access
off. When I looked at the running processes, in addition to my own
and root processes, there was a process from "18145". So I did
hesinfo 18145 uid
Which returned:
bdrobert:*:18145:101:Brian D Robertson,,Media-Lab,2530300,2623192:/mit/bdrobert:/bin/csh
When I finger this user, I get:
Login name: bdrobert In real life: Brian D Robertson
Nickname: Home phone: 262-3192
Office: Media-Lab Office phone: 253-0300
Electronic mail address: bdrobert@ATHENA.MIT.EDU
Who I don't know. When I asked an on-line consultant what to do, they
said to report it to you. Feel free to contact me if I can give you
any more information.
- Joshua Koppelman
joshua@athena.mit.edu
(617) 494-8677
