I have updated the amd64-i386 installer and the RPi image to disable the default accounts. Note BOTH these are RC1 changes only. After we get back from the Hamvention, I'll make them full release. 73, Steve N4IRS On 5/10/2017 3:38 PM, Steve Zingman wrote:
No, It was never used. Jim never explained WHY he wanted it. I'm fixing the installer now.
Steve
On 5/10/2017 3:36 PM, Steve Passmore wrote:
Thanks Steve,
I removed the user on the affected machine, Should I expect any problems?
Steve, k6kya
On Wed, May 10, 2017 at 12:19 PM, Steve Zingman <szingman@msgstor.com <mailto:szingman@msgstor.com>> wrote:
That is a leftover "mandated" from above. It will be disabled in the RC.
Steve N4IRS
On 5/10/2017 3:15 PM, Steve Passmore wrote:
Does anyone know what the user "debian" is used for in the DIAL distro? I had a node compromised where it appears they guessed the password for the user debian. I note on other un-compromised nodes there is a preexisting user "debian" with a password set. The attacker installed a bitcoin miner, storing their files under /var/tmp/.new chrootkit reported it as possibly being the Mumblehard backdoor.
I'd suggest anyone with a DIAL node, at the very least, remove the user "debian"'s password.
passwd -d debian
Steve, k6kya
_______________________________________________ App_rpt-users mailing list App_rpt-users@lists.allstarlink.org <mailto:App_rpt-users@lists.allstarlink.org> http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users <http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users>
To unsubscribe from this list please visithttp://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users <http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users> and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button" You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.
_______________________________________________ App_rpt-users mailing list App_rpt-users@lists.allstarlink.org <mailto:App_rpt-users@lists.allstarlink.org> http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users <http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users> To unsubscribe from this list please visit http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users <http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users> and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button" You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.
_______________________________________________ App_rpt-users mailing list App_rpt-users@lists.allstarlink.org http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users
To unsubscribe from this list please visithttp://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button" You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.