[App_rpt-users] What is the "debian" user in the DIAL distro?

[Steve Zingman]

I have updated the amd64-i386 installer and the RPi image to disable the 
default accounts.
Note BOTH these are RC1 changes only. After we get back from the 
Hamvention, I'll make them full release.

73, Steve N4IRS

On 5/10/2017 3:38 PM, Steve Zingman wrote:
> No,
> It was never used. Jim never explained WHY he wanted it. I'm fixing 
> the installer now.
>
> Steve
>
> On 5/10/2017 3:36 PM, Steve Passmore wrote:
>> Thanks Steve,
>>
>> I removed the user on the affected machine,  Should I expect any 
>> problems?
>>
>> Steve, k6kya
>>
>> On Wed, May 10, 2017 at 12:19 PM, Steve Zingman <szingman at msgstor.com 
>> <mailto:szingman at msgstor.com>> wrote:
>>
>>     That is a leftover "mandated" from above. It will be disabled in
>>     the RC.
>>
>>     Steve N4IRS
>>
>>
>>     On 5/10/2017 3:15 PM, Steve Passmore wrote:
>>>     Does anyone know what the user "debian" is used for in the DIAL
>>>     distro?    I had a node compromised where it appears they
>>>     guessed the password for the user debian.  I note on other
>>>     un-compromised nodes there is a preexisting user "debian" with a
>>>     password set.
>>>     The attacker installed a bitcoin miner, storing their files
>>>     under /var/tmp/.new chrootkit reported it as possibly being the
>>>     Mumblehard backdoor.
>>>
>>>     I'd suggest anyone with a DIAL node, at the very least, remove
>>>     the user "debian"'s password.
>>>
>>>     passwd -d debian
>>>
>>>     Steve, k6kya
>>>
>>>
>>>     _______________________________________________
>>>     App_rpt-users mailing list
>>>     App_rpt-users at lists.allstarlink.org
>>>     <mailto:App_rpt-users at lists.allstarlink.org>
>>>     http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users
>>>     <http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users>
>>>
>>>     To unsubscribe from this list please visithttp://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users
>>>     <http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users>  and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"
>>>     You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.
>>     _______________________________________________ App_rpt-users
>>     mailing list App_rpt-users at lists.allstarlink.org
>>     <mailto:App_rpt-users at lists.allstarlink.org>
>>     http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users
>>     <http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users>
>>     To unsubscribe from this list please visit
>>     http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users
>>     <http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users>
>>     and scroll down to the bottom of the page. Enter your email
>>     address and press the "Unsubscribe or edit options button" You do
>>     not need a password to unsubscribe, you can do it via email
>>     confirmation. If you have trouble unsubscribing, please send a
>>     message to the list detailing the problem. 
>>
>> _______________________________________________
>> App_rpt-users mailing list
>> App_rpt-users at lists.allstarlink.org
>> http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users
>>
>> To unsubscribe from this list please visithttp://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users  and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"
>> You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.keekles.org/pipermail/app_rpt-users/attachments/20170510/43a4181e/attachment.html>