HN Explorer

7 comments

[ 2.8 ms ] story [ 31.7 ms ] thread
badalex
8,500 unique IP addresses during 7 months. How is this not trivial?
noonespecial
That pirated copy of DirectMailer that you loaded onto your server also sends spam?! Whoda thunk it?
tux1968
I know what you're saying... but this is odd:

"... we found that IP addresses hard-coded in the malware are closely tied to those of Yellsoft"

cruelfate
Learned a couple of things from linked research paper like always mount /tmp and /var/tmp as noexec, and some `dig` fu.
feld
noexec can break a lot of things so please be mindful
cruelfate
Ya, was wondering about package install scripts.
kjs3
You can remount those dirs without noexec when you need to do a legitimate install.