Recent attacks
Jefferson Lab (CEBAF) (HEPiX talk at JLAB Oct 97)
- summer 97
- was disconnected from the Internet for 5 days!
DESY - Zeuthen
- Nov 97 (data destroyed on remote sites)
Common pattern
- access to users password (on LINUX)
- use security hole to get root access
- install sniffer and replace ls, ps etc commands
- gain many usernames/passwords - on/off site