|
OpenBSD Security Functionally paranoid! |
|
Thread Tools | Display Modes |
|
|||
Desperate. Doing the unthinkable! ( never seen it done here before )
This guy is gaining root access on his xbox, playstation, whatever with some kind of stupid script that puts his name in my root. I know this guy, too. It happens when I do a ftp install of OpenBSD 47 snapshot.
Here's the master.passwd file: ( top of it anyway ) root:$2a$08$PNfB7EKYiT63/UfkxIT2I.EobNwxB8ibMN/O4RWVIiXr1yMVRrjcW:0:0:daemon:0:0:Charlie &:/root:/bin/ksh daemon:*:1:1::0:0:The devil himself:/root:/sbin/nologin operator:*:2:5::0:0:System &:/operator:/sbin/nologin bin:*:3:7::0:0:Binaries Commands and Source,,,:/:/sbin/nologin smmsp:*:25:25::0:0:Sendmail Message Submission Program:/nonexistent:/sbin/nologin |
|
||||
"Charlie &" is the default name given to the root user on OpenBSD. An ancient BSDism.
Look at the source to master.passwd delivered to you by the Project: http://www.openbsd.org/cgi-bin/cvswe.../master.passwd Now, go change your root password, since you have published it. /etc/master.password is chmod 600 for a reason. |
|
|||
It is also worthwhile searching the misc@ archives for similar information. ie.
http://marc.info/?l=openbsd-misc&m=99640482412430&w=2 |
|
|||
No offence to the OP, but this was hilarious.
|
|
||||
Did I miss April Fools again?
__________________
My Journal Thou shalt check the array bounds of all strings (indeed, all arrays), for surely where thou typest ``foo'' someone someday shall type ``supercalifragilisticexpialidocious''. |
|
|||
End Game: Charlie is a must have "HACKER" name if you wanna be a 'real' serious OpenBSD Hacker. Then, you just have to pretend to have an interest in the Occult, and voila! Get root, put your name "Charlie" there and be an egotistical jackass and say, "The Devil Himself! If I don't say so myself!" HA!!!!
|
|
|||
See, I have a friend down the street named "Charlie." He was in the military, was airborne qualified, supposedly did a lot of 'Counter Intelligence' work. Who knows maybe he did, maybe he didn't. He loves the occult. Please don't say the word Daemon or Demon around him because he'll go off on a tangent about religion and yada yada yada. He plays Star Wars shoot'em up games on his Playstation and Xbox all day.
When I saw the contents of that file, with his name, saying 'the devil himself' I almost died. I could have sworn he had been violating my computer territory. Now, after the fact. It's funny as hell. I just couldn't believe the coincidences. One it's a maybe, but two? It's almost surely not. Right? Well, no. I was wrong. Thanks to jggmi for helping me see the light. |
Thread Tools | |
Display Modes | |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
Desperate help needed for KDE | disappearedng | FreeBSD General | 12 | 17th July 2008 05:21 PM |