Utenforstående har klart å komme seg inn på data-anlegget på noen institutter ved vårt fakultet. De har hatt sjansen til å "sniffe" noen passord fra våre brukere. Jeg vil understreke viktigheten av å skifte passord av og til, og å bruke passord av høy kvalitet. Se vedlagte melding fra Bjørn Tore Sund:
Two of our neighbouring departments have had "hackers" on their systems. We know they have been remotely monitoring our system and that they have been able to gain access to some of our user accounts.
The confirmed infiltrated accounts have been blocked. It is, however, a very good idea to change passwords regularly, and we encourage all our users to do so. Users who fail to reset their passwords within this current week may have their accounts blocked without further notice.
1. Use the command 'yppasswd' on the command line of a linux machine. Use the command 'smbpasswd -r abel' as well if use a laptop or windows machine to access your home directory directly, without logging in using ssh.
2. Pick a good password. A combination of capital and small letters, mix in a few numbers and special characters. Do not use words (even as subsets) which can be found in dictionaries for ANY language. Do not set your password to be the same as before. We'll detect this and be angry.
3. If you have accounts in several places (central IT-dept, neigbouring departments, other institutions) use DIFFERENT passwords each place to avoid a successful break-in in one place to have effect on the others.
4. Never give your username/password to others, and never "lend" your account to others. We will start enforcing rules on this now.
5. Never, ever, at all, use the command "xhost +" on your system. It essentially means that everything your write and everything you view can be read by anyone who wants to. This goes whether you're writing test/exam papers or typing passwords...
The internet is not a safe place. Please help us keep out little part of it as safe as possible by following the above, simple rules.