*** SECURITY information for LOCALHOST ***

[danielwang]

I've just sent this prank e-mail out to a network administrator.
A particularly *very* paranoid one.

(hostname replaced by "WindowsBox")

[quote=email]
FakeFrom: root@localhost (console)
Subject: *** SECURITY information for WindowsBox ***
Body text:
*** SECURITY information for WindowsBox ***
12 Aug 21:15:07 WindowsBox sudo: BOX : user NOT in sudoers ; TTY=pts/1 ; PWD=/root ; USER=root ; COMMAND=/etc/vipw

[/quote]

Evil, no?

What would you do if you have recieved an email that looked like it came from sudo? With your real hostname?

[Cardinal.jpg]

Ohh I get it.

[trythil]

I've just sent this prank e-mail out to a network administrator.
A particularly *very* paranoid one.

(hostname replaced by "WindowsBox"

FakeFrom: root@localhost (console)
Subject: *** SECURITY information for WindowsBox ***
Body text:
*** SECURITY information for WindowsBox ***
12 Aug 21:15:07 WindowsBox sudo: BOX : user NOT in sudoers ; TTY=pts/1 ; PWD=/root ; USER=root ; COMMAND=/etc/vipw

Evil, no?

What would you do if you have recieved an email that looked like it came from sudo? With your real hostname?

I would laugh at the idiot who thought my admin account was still "root".

I would laugh at the idiot who assumed the machine name was "localhost".

I would laugh at the idiot who thinks that admins don't correspond e-mails with local logs.

I would laugh at the idiot who thinks that all e-mail headers can be hidden and forged.

I'll do that now.

[Jace Tsunami]

trythil, that was golden

[OmniStrata]

ditto

[klinky]

I'd beat danielwang with a large sharp stick. Oh wait it's knife and they're stabbing motions.

:O I'll do that now too...