[Fwd: [Fwd: [Rhic-rcf-l] RHIC and US Atlas Users : Passwords sniffed at CERN/IN2P3]]

From: Eun-Joo Kim (ejkim@rcf.rhic.bnl.gov)
Date: Tue Apr 08 2003 - 11:46:59 EDT

  • Next message: Kris Hagel: "Geometry for Run-III"
    
    

    attached mail follows:


    Dear Liaisons,
    
    	Please make sure that the message below from Shigeki about the password 
    sniffers at CERN and IN2P3 gets wide distribution, so that all RCF/ACF 
    users with CERN or IN2P3 accounts see it.  I have also received word 
    that Rutherford Lab in England also has a sniffer running, so users with 
    RAL accounts should also change their RCF/ACF password as per the 
    recommendation in Shigeki's message.
    
    				Thank you,
    					Tom
    
    -------- Original Message --------
    Subject: [Rhic-rcf-l] RHIC and US Atlas Users : Passwords sniffed at 
    CERN/IN2P3
    Date: Mon, 7 Apr 2003 12:19:06 -0400
    From: RCF/USAtlas Staff <rcfstaff@bnl.gov>
    To: rhic-rcf-l@lists.bnl.gov, usatlas-users-l@lists.bnl.gov
    
    RHIC and US Atlas users that have accounts at
    CERN or IN2P3 are urged to change their passwords
    at the RCF and ACF.
    
    There has been a discovery of password sniffing
    logs at CERN and IN2P3. These logs originate from
    network sniffers and/or trojaned binaries that
    appear to have been installed on compromised
    systems at those sites on or around March 7,
    2003. Further investigation shows that at least
    one attempt was made to connect from the
    compromised systems to the RCF and ACF.
    
    Since the full extent of the damage from the
    compromise is difficult to determine, the
    RCF/ACF is recommending that  all RCF/ACF users
    with CERN or IN2P accounts change their passwords
    at the RCF and ACF. For added security, it is
    recommended that user login directly to the
    RCF/ACF to make these changes. (i.e., do not
    login to the RCF/ACF from CERN or IN2P3).
    
    
    Shigeki Misawa (misawa@bnl.gov)
    
    
    --
    This message forwarded from the RCF announcements page.
    Recent messages are available at:
    http://www.rhic.bnl.gov/RCF/Announcements/announce.html
    
    _______________________________________________
    Rhic-rcf-l mailing list
    Rhic-rcf-l@lists.bnl.gov
    http://lists.bnl.gov/mailman/listinfo/rhic-rcf-l
    
    
    -- 
    -----------------------------------------------------
    Thomas G. Throwe       E-mail: throwe@bnl.gov
    RCF -- RHIC Project -- Brookhaven National Laboratory
    WWW: http://www.rhic.bnl.gov/RCF/
    Phone: (631) 344-3110  Fax: (631) 344-7616
    -----------------------------------------------------
    


    This archive was generated by hypermail 2.1.5 : Tue Apr 08 2003 - 11:53:10 EDT