News for hackers. Stuff that matters.

A comment on Linode hacked, CCs and passwords leaked. Parent comment

Re:Linode hacked, CCs and passwords leaked by tomjen3 on Monday April 15, 2013 @01:59PM (#5553000)
The paste-bin link he provided seems to time out for me.

But if the things he claim in there is even half way true, nobody involved with linode should ever be allowed to be in business every again.

[ Parent | on HN ]
Re:Linode hacked, CCs and passwords leaked by Tomdarkness on Monday April 15, 2013 @02:01PM (#5553017)
pastebin is a directory listing of linode.com - trying out a few of the files checks out, including very difficult to guess file names such as:

http://www.linode.com/y_key_57284cb2de704e02.html

[ Parent | on HN ]
Re:Linode hacked, CCs and passwords leaked by jaxbot on Monday April 15, 2013 @06:03PM (#5554724)
Am I the only one who is more confused about why there are compiled java classes and AMI BIOS updates in the www directory than about the hacking itself?
[ Parent | on HN ]
Re:Linode hacked, CCs and passwords leaked by 286c8cb04bda on Monday April 15, 2013 @07:13PM (#5555120)
> Am I the only one who is more confused about why there are compiled java classes and AMI BIOS updates in the www directory than about the hacking itself?

Sysadmins being lazy.

Somebody needs to get a file from a workstation to a remote machine. There's a firewall in the way somewhere that prevents SSH directly between them or one of them is a Windows box that isn't running an SSH server.

The "correct" solution is complicated and takes 5 minutes to setup. So the sysadmin just copies the file to the web server and downloads it with a browser on the other end. Because port 80 is always open.

[ Parent | on HN ]
Re:Linode hacked, CCs and passwords leaked by nob on Tuesday April 16, 2013 @01:23AM (#5556421)
Something that took me a long time to notice was that you can actually copy files directly over a RDP session from/to the local machine or other RDP sessions using the clipboard.. Even nested RDPs. Has been an absolute timesaver to know about when doing Windows admin work.
[ Parent | on HN ]
Re:Linode hacked, CCs and passwords leaked by rurounijones on Tuesday April 16, 2013 @02:06AM (#5556533)
Doesn't work for me when using an RDP client on Linux. Is this an RDP spec thing or a microsoft only feature?
[ Parent | on HN ]
Re:Linode hacked, CCs and passwords leaked by jethro_tell on Tuesday April 16, 2013 @02:41AM (#5556634)
I think it depends on how you mount your clipboard/drives on rdp connect. To get it right with windows you just check the share clipboard/share drive checkboxes and off to the races. With rdesktop you have to throw the -r flag and mount a clip board and then the -r flag and mount a drive. Not sure about other Linux clients but I'm sure there's a similar option in all of them.
[ Parent | on HN ]
Re:Linode hacked, CCs and passwords leaked by rurounijones on Tuesday April 16, 2013 @03:17AM (#5556734)
Excellent, thank you very much. I use KRDC and a bit of googling shows that that uses rdesktop in the background. I shall investigate.
[ Parent | on HN ]