Version française
Home     About     Download     Resources     Contact us    

This site is updated infrequently. For up-to-date information, please visit the new OCaml website at

Browse thread is down
[ Home ] [ Index: by date | by threads ]
[ Search: ]

[ Message by date: previous | next ] [ Message in thread: previous | next ] [ Thread: previous | next ]
Date: 2010-12-20 (02:20)
From: Grant Olson <kgo@g...>
Subject: Re: [Caml-list] is down
On 12/19/10 8:03 PM, wrote:
> Why not just updateing the machine, or if no updates are available, just eremove exim?!

If a machine has been compromised, or even if you suspect it has, you
can't trust anything about it anymore.

Someone could have used the exim exploit to install a rootkit, a version
of sshd with a backdoor, etc.  And sure, maybe you can take the sha of
sshd and compare it to a known source, but maybe sha256 has been
replaced with a version that tricks you.

So you patch exim, think you're good, and they come back to your machine
six months later.

You have to rebuild from scratch.


"I am gravely disappointed. Again you have made me unleash my dogs of war."