| 1 |
On Wed, 22 Sep 2010 23:26:09 -0500, Dale wrote: |
| 2 |
|
| 3 |
> > Thanks Mick. My host is big with multiple data centers of their own. |
| 4 |
> > They did exactly as I asked and I'm running on new RAM. There was a |
| 5 |
> > problem bringing my system back online and the cause was purported to |
| 6 |
> > be an unseated ethernet cable. I handed over my root password as I |
| 7 |
> > was requested to do, and then started to get paranoid. I suppose I |
| 8 |
> > shouldn't though because with physical access to my machine they |
| 9 |
> > pretty much have full access anyway, right? |
| 10 |
|
| 11 |
> Usually, physical access means they either have it or can get it pretty |
| 12 |
> quick. Boot a CD/DVD, mount the partitions, chroot in, change password |
| 13 |
> and reboot. Then, you don't have the password but they do. |
| 14 |
|
| 15 |
That's pretty obvious though. Physical access allows them to change your |
| 16 |
password but not read it, so you'd know pretty soon if they'd been up to |
| 17 |
anything. |
| 18 |
|
| 19 |
If they really do need the root password, you have to give it to them, |
| 20 |
but that doesn't stop you changing it, and running a rootkit scan, as |
| 21 |
soon as they've finished with it. |
| 22 |
|
| 23 |
|
| 24 |
-- |
| 25 |
Neil Bothwick |
| 26 |
|
| 27 |
God said, "div D = rho, div B = 0, curl E = - @B/@t, curl H = J + @D/@t," |
| 28 |
and there was light. |
Archives