Darn Annoying Hackers...
Well, I'll be the first person to admit I'm not perfect, and I found that out really quickly when we were hacked severely over the weekend. My biggest mistake was using the same two passwords all over a bunch of assorted Linux boxes I use around the Internet, and my second mistake was overusing 'sudo' and giving myself too much access based on two very good and cryptic passwords . Sure they were good passwords, but once someone has captured those two passwords (through a compromised ssh client or sshd server no doubt), they had root access all over the place. So now I have changed passwords everywhere, patched assorted systems with clean binaries (why are we still using Red Hat 9 on some boxes?) and removed access to many domains and simply turned off sshd on several systems that really did not need it (Did I really need to ssh into my iMac?). What a fun time this has been, all because a few people somewhere thought they needed to run psyBNC bouncer somewhere and also...