[22151] in Hotline Meeting
Negative access login in hayden-7
daemon@ATHENA.MIT.EDU (cheeky@MIT.EDU)
Sun Apr 10 01:16:51 1994
From: cheeky@MIT.EDU
Date: Sun, 10 Apr 94 01:16:40 -0400
To: hotline@MIT.EDU
Cc:
--------
Hi !
A user just reported that someone is logged in at the same Sun
workstation as he is as "Negative Access". Since the Suns have single
user liscense only, plus the fact that that negative access login has
been idle for 64 days, it would like the workstation could possibly be
hacked. Can you please take a look at it (hopefully it is not a security
compromise). Below are the relevant information I could gather:
(at Sun morning 1.15am, this is what I got on finger)
<125>unca-donald:~
% f @hayden-7
[hayden-7.MIT.EDU]
Login Name TTY Idle When Where
negative Negative Access pts/0 64d Thu 18:59
(This is what the user sent us)
athena% finger
Local:
Login Name TTY Idle When Office
flj Frank Lee p0 4 Wed 19:00 617-225-6436
flj Frank Lee p0 Wed 19:00 617-225-6436
flj Frank Lee p1 Wed 19:00 617-225-6436
negative Negative Access p0 Wed 19:00
Please keep us informed about the matter.
% Chee-Kiang Lim
% IS/CSS Student Consultant
% cheeky@Athena
