Intrusion/server status

[Michael Schwendt]

On Mon, 25 Aug 2008 19:24:23 -0500, Chris Adams wrote:

> Well, there has been a lack of communication about this whole thing.
> Was it a case of someone having access that shouldn't, was there a
> security breach (in which case are my servers vulnerable), etc.?

Would it make sense to reinstall servers and take them online if they are
still vulnerable through public network services? Have you seen any
critical security advisories for RHEL (other than RHSA-2008-0855), for
example? I could speculate about several ways to gain illegal network
access to servers (and the reasons it was possible), but I spare myself
the typing and the creation of rumours.

> Nobody likes having bad things to say, but in the absence of
> information, rumors and speculation fill the gap (which is not good).

Right.