#7258 HIGH Never A: possible XO security issue psybnc

[Zarro Boogs per Child]

#7258: possible XO security issue psybnc
-----------------------+----------------------------------------------------
  Reporter:  hhardy    |       Owner:  mstone        
      Type:  defect    |      Status:  new           
  Priority:  high      |   Milestone:  Never Assigned
 Component:  security  |     Version:  Update.1      
Resolution:            |    Keywords:                
  Verified:  1         |    Blocking:                
 Blockedby:            |  
-----------------------+----------------------------------------------------

Old description:

> An XO was apparently hacked and an instance of psybnc was apparently
> installed.
>
> Investigate and document how this happened.
>
> Determine what can be done to mitigate the risk.

New description:

 An XO was apparently hacked and an instance of psybnc was apparently
 installed.

 Investigate and document how this happened.

 Determine what can be done to mitigate the risk.

 Erik suggests setting up a "honeypot" XO.

 We could run tripwire on the XO and have a "man-in-the-middle" to run
 tcpdump and use ACID and SNORT to analyse the traffic.

--

Comment(by hhardy):

 Replying to [ticket:7258 hhardy]:
 > An XO was apparently hacked and an instance of psybnc was apparently
 installed.
 >
 > Investigate and document how this happened.
 >
 > Determine what can be done to mitigate the risk.

-- 
Ticket URL: <http://dev.laptop.org/ticket/7258#comment:1>
One Laptop Per Child <http://laptop.org/>
OLPC bug tracking system