[K12OSN] uh oh

[bimal pandit]

On Thu, 2004-12-16 at 09:19, anthony baldwin wrote:
> Burke Almquist wrote:
> > Someone probably figured out your user password and changed it.
> > 
> > On Dec 15, 2004, at 4:04 PM, anthony baldwin wrote:
> > 
> >> I ended up rebooting the machine and logging in as root, checked users 
> >> & groups settings, and, sure enough,
> >> appeared as though my password has been changed.
> >> The root password was not altered, just my user password.
> >> Could this mean that my machine was somehow compromised?
> > 
> > 
> > _______________________________________________
> > K12OSN mailing list
> > K12OSN at redhat.com
> > https://www.redhat.com/mailman/listinfo/k12osn
> > For more info see <http://www.k12os.org>
> > 
> 
> This would have to have been done remotely.
> The computer was alone in my room at home all day,
> but connected to the internet.
> 
> How may I check this out further?

check using following commands

1) w ,who

2) last 

see man pages for more detailed options

regards

bimal