Path: csiph.com!newsfeed.hal-mli.net!feeder3.hal-mli.net!newsfeed.hal-mli.net!feeder1.hal-mli.net!news.tele.dk!feed118.news.tele.dk!news.tele.dk!small.news.tele.dk!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.199 X-Spam-Level: * X-Spam-Evidence: '*H*': 0.65; '*S*': 0.05; 'root': 0.05; 'doing?': 0.09; 'will,': 0.09; 'attempted': 0.16; 'inability': 0.16; 'received:209.85.161.174': 0.16; 'subject:Self': 0.16; 'wrote:': 0.18; 'not,': 0.20; 'appears': 0.22; 'issue.': 0.22; 'header:User- Agent:1': 0.23; 'header:In-Reply-To:1': 0.27; 'point': 0.28; 'file': 0.32; "i'd": 0.34; 'received:209.85': 0.35; 'except': 0.35; 'but': 0.35; 'received:google.com': 0.35; 'really': 0.36; '+0200,': 0.36; 'doing': 0.36; 'charset:us-ascii': 0.36; 'should': 0.36; 'received:209': 0.37; 'server': 0.38; 'nov': 0.38; 'to:addr :python-list': 0.38; 'rather': 0.38; 'sure': 0.39; 'to:addr:python.org': 0.39; 'further': 0.61; 'you.': 0.62; 'content-disposition:inline': 0.62; 'received:190': 0.69; 'business': 0.70; 'legal': 0.71; 'secure': 0.71; 'malicious': 0.84; 'received:190.163': 0.84; 'rpm': 0.91; 'clients,': 0.95; 'criminal': 0.95; '2013': 0.98 X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:date:from:to:subject:message-id:references :mime-version:content-type:content-disposition:in-reply-to :user-agent; bh=feRan4DDfTkWdkr5mXEsItJY1lM0p9v3E2VAo27K5Lg=; b=KBLi4J/kbrOMJwe1HhMklv9B7SfWEfSWikbcZ+SvT3Hrp/4axewrT1m0Zv8xKzoXwu VQrBwX0ugj2AqpMDkaE2xiVXyRUYGJBFvIIkCUsCs9FSdRZXXpFKzax0R0Sm6MfetRZT an0tJTmgCiOCz4SY2uxU790LDodrASWMFpbCZk8Lfoy97+vt9WyvXiN7R+4c6T2th2F1 yhU66ERfGlgcnZknJ2LtG85Nvhe1NY+GLQzEbnnVQvEiFJpqS3wkeyfdsKBXPkvLH140 QjY+ii4Y06IUuKaqYY4C1uatpsNuVT43zqqUpAoU+TAtshb0y+v8rgLscqmNPkBUOiWu W5lA== X-Gm-Message-State: ALoCoQnkyPzfFmEnl5xPkG3FJlib5zqE3q/VtgJ4w3hpdKA2ZsmsS1+tCW34JX/UbYJYuHMfjpMc X-Received: by 10.236.35.99 with SMTP id t63mr13192573yha.19.1384709876835; Sun, 17 Nov 2013 09:37:56 -0800 (PST) Date: Sun, 17 Nov 2013 14:37:52 -0300 From: Zero Piraeus To: python-list@python.org Subject: Re: Self-defence References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-PGP-Key: http://etiol.net/pubkey.asc User-Agent: Mutt/1.5.21 (2010-09-15) X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Newsgroups: comp.lang.python Message-ID: Lines: 36 NNTP-Posting-Host: 2001:888:2000:d::a6 X-Trace: 1384716039 news.xs4all.nl 15991 [2001:888:2000:d::a6]:42113 X-Complaints-To: abuse@xs4all.nl Xref: csiph.com comp.lang.python:59790 : I'd really rather not, but since this is a public accusation of criminal behaviour: On Sun, Nov 17, 2013 at 07:16:34PM +0200, Nikos wrote: > Is this your doing? > > [18:03:55 secure root@4385109 /lib64]cPs# ls -al |grep libkey > lrwxrwxrwx 1 root root 20 Jun 22 2012 libkeyutils.so.1 -> > libkeyutils.so.1.3.0* > > -rwxr-xr-x 1 root root 10192 Jun 22 2012 libkeyutils.so.1.3* > -rwxr-xr-x 1 root root 32920 Jun 22 2012 libkeyutils.so.1.3.0* > [18:03:57 secure root@4385109 /lib64]cPs# rpm -qf libkeyutils.so.1.3.0 > file /lib64/libkeyutils.so.1.3.0 is not owned by any package > > It appears that my server has been compromised with a malicious > payload designed to sniff for and steal server passwords. > > I'am sure this is your doing Zero Piraeus. It is not my doing. Please desist from defaming me. I will not respond here, or except through legal counsel should that prove necessary, to further communications from you. I will, however, point out that the last time you were embarrassed in public over your inability to maintain the security of your business and that of your clients, I attempted in private to assist you in resolving your issue. -[]z. -- Zero Piraeus: dictatum erat http://etiol.net/pubkey.asc