- Blind-sysadmins - lists.hodgsonfamily.org

possible security breech
by David Mehler 11 Jul '14

11 Jul '14

Hello Everyone, I'm running an fc20 Linux linode. I'll admit the past two months I've not been paying as much attention to it as I should, with a bunch of unexpected stresses. That being said it is fully up to date, I do that daily and it is running a firewall as well as the fail2ban software for automated bots defense. Tonight I checked my email and noticed two from an account on my system sent to me that is my account. I've got all root email forwarded to my account to read it. Now two things, first this account shouldn't have got any cron reports, second since I use virtual users and they're all in a database that user shouldn't have been able to send email from my server to me. I checked the account on the server and noticed a hidden directory called .local under which there was a share directory and a system directory under that. Finally there is a broken symbolic link called user which points or pointed I should say to a now nonexistent file and folder which do not exist. I've got an email out to the user, and I've checked the password file for any accounts with login shells, nothing new has come up. If this was an attempted root breakin with a rootkit this user is not in th e sudoers file so I think I'm safe there. I'd like to hear your thoughts on this, and some further steps I can take on this issue to either confirm or refute as to whether I've been breeched. Thanks. Dave.

4 10

possible security breech
by David Mehler 09 Jul '14

09 Jul '14

Hello Everyone, I'm running an fc20 Linux linode. I'll admit the past two months I've not been paying as much attention to it as I should, with a bunch of unexpected stresses. That being said it is fully up to date, I do that daily and it is running a firewall as well as the fail2ban software for automated bots defense. Tonight I checked my email and noticed two from an account on my system sent to me that is my account. I've got all root email forwarded to my account to read it. Now two things, first this account shouldn't have got any cron reports, second since I use virtual users and they're all in a database that user shouldn't have been able to send email from my server to me. I checked the account on the server and noticed a hidden directory called .local under which there was a share directory and a system directory under that. Finally there is a broken symbolic link called user which points or pointed I should say to a now nonexistent file and folder which do not exist. I've got an email out to the user, and I've checked the password file for any accounts with login shells, nothing new has come up. If this was an attempted root breakin with a rootkit this user is not in th e sudoers file so I think I'm safe there. I'd like to hear your thoughts on this, and some further steps I can take on this issue to either confirm or refute as to whether I've been breeched. Thanks. Dave.

1 0

Re: [Blind-sysadmins] Malware Bytes inaccessible
by Chris Smart 08 Jul '14

08 Jul '14

this keeps coming up on various lists. version 2 broke accessibility but the company says it will be restored in version 2.1. In the meantime, just tell version 1.75 not to update the program, but to continue updating the database. You'll be as safe as ever. At 11:08 AM 7/8/2014, you wrote: >Has anyone found that the latest version of Malware Bytes is >inaccessible to screen readers. Is there another free product which >anyone would recommend as a cleanup tool in addition to having a >regular Antivirus program. We use Viper Business edition, but of >course, it's good to have another tool which finds things that the >commercial products don't. >Thanks. >_______________________________________________ >Blind-sysadmins mailing list >Blind-sysadmins(a)lists.hodgsonfamily.org >http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

2 2

Malware Bytes inaccessible
by Troy Hergert 08 Jul '14

08 Jul '14

Has anyone found that the latest version of Malware Bytes is inaccessible to screen readers. Is there another free product which anyone would recommend as a cleanup tool in addition to having a regular Antivirus program. We use Viper Business edition, but of course, it's good to have another tool which finds things that the commercial products don't. Thanks.

2 2

Malware Bytes inaccessible
by Troy Hergert 08 Jul '14

08 Jul '14

Has anyone found that the latest version of Malware Bytes is inaccessible to screen readers. Is there another free product which anyone would recommend as a cleanup tool in addition to having a regular Antivirus program. We use Viper Business edition, but of course, it's good to have another tool which finds things that the commercial products don't. Thanks.

1 0

the tf100t
by mattias 08 Jul '14

08 Jul '14

if i buy a tf100t with w8 are it possible to turn it on and setup it with narrator? i listen to the podcast about dell envy or what name it have the girl do exacly so

1 0

Accessible harddisk backup software question
by Christian 01 Jul '14

01 Jul '14

Hi all, Has anyone a good tip on an accessible harddisk backup software that can also restore your primary Windows partition? Many thanks, Christian

5 12

USB External Server Backup Drives
by George Bell 26 Jun '14

26 Jun '14

Does anyone know of, and perhaps even use, a make and model of UEB external drive which will allow backup of SBS 2011/Server 2008 R2. Ideally I need 2. There appears to be a very limited range of such drives, and certainly the likes of the Seagate Backup Plus (2 TB) do not work. It needs to be something I can remove one from the premises, without getting a hernia in the process. George.

3 13

Jaws network installation
by Chamandeep Singh Grover 26 Jun '14

26 Jun '14

Hi all, I'm trying to get a jaws network license setup for the company i work at. I'm not very familiar with this, but here is my understanding. The basic concept is that if a machine (physical or virtual) can be pinged, it should be possible to install the jaws license server on this, so that other clients can take the tokens. I would be installing this server on a virtual machine, but here is my question. A virtual machine can only be used by one user at a time, so when jaws retrieves the token, is the connection kept open or after the token is received the connection also closes? Could someone please explain to me how this token exchanging takes place? Would a server work if it is installed on the virtual machine? would appreciate any help with this. Regards, Chamandeep Singh Grover

1 0

Jaws network installation
by Chamandeep Singh Grover 26 Jun '14

26 Jun '14

Hi all, I'm trying to get a jaws network license setup for the company i work at. I'm not very familiar with this, but here is my understanding. The basic concept is that if a machine (physical or virtual) can be pinged, it should be possible to install the jaws license server on this, so that other clients can take the tokens. I would be installing this server on a virtual machine, but here is my question. A virtual machine can only be used by one user at a time, so when jaws retrieves the token, is the connection kept open or after the token is received the connection also closes? Could someone please explain to me how this token exchanging takes place? Would a server work if it is installed on the virtual machine? would appreciate any help with this. Regards, Chamandeep Singh Grover

1 0