Version française
Home     About     Download     Resources     Contact us    
Browse thread
ocaml-tutorial.org is down
[ Home ] [ Index: by date | by threads ]
[ Search: ]

[ Message by date: previous | next ] [ Message in thread: previous | next ] [ Thread: previous | next ]
Date: -- (:)
From: Grant Olson <kgo@g...>
Subject: Re: [Caml-list] ocaml-tutorial.org is down
On 12/19/10 8:03 PM, oliver@first.in-berlin.de wrote:
> 
> Why not just updateing the machine, or if no updates are available, just eremove exim?!
> 

If a machine has been compromised, or even if you suspect it has, you
can't trust anything about it anymore.

Someone could have used the exim exploit to install a rootkit, a version
of sshd with a backdoor, etc.  And sure, maybe you can take the sha of
sshd and compare it to a known source, but maybe sha256 has been
replaced with a version that tricks you.

So you patch exim, think you're good, and they come back to your machine
six months later.

You have to rebuild from scratch.

-- 
Grant

"I am gravely disappointed. Again you have made me unleash my dogs of war."