<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>They used a cgi script exploit on port 80<br><br>Sent from my iPhone</div><div><br>On 15 Aug 2017, at 10:12 am, Matthew Cook <<a href="mailto:vk5zm@bistre.net">vk5zm@bistre.net</a>> wrote:<br><br></div><blockquote type="cite"><div><div dir="ltr">If you're going to put a pi (or any linux machine) on the net make sure you've hardened it first. <div><br></div><div>It pays to disable the "pi user" account and create your own, then some simple firewall rules and fail2ban if you're going to leave the ssh port open. Using some nasty password generated by lastpass or keypass will do you well. SSH certificate's are your friend if you dont want to deal with the constant login attempts. Also make sure that you reduce your logging requirements if you've got a small SD card in the machine. There are a heap of Debian tutorials that work directly on the rPi.</div><div><br></div><div>I've been running my receive only iGate on a rPi-A for the past 3-4 years, hardened they are good, left open they will be p00ned.</div><div><br></div><div>This isn't the first rPi to be hacked as Dave have suggested script kiddies can now get in and run amok. It used to be amusing watching script kiddies try to install x86 packages on a rPI but they are wise to ARM based procs now. </div><div><br></div><div>I know of another Amateur based rPi project that this happened too recently as well.</div><div><br></div><div>73</div><div><br></div><div>Matthew</div><div>VK5ZM</div></div><div class="gmail_extra"><br><div class="gmail_quote">On 15 August 2017 at 01:45, Andrew Rich <span dir="ltr"><<a href="mailto:vk4tec@tech-software.net" target="_blank">vk4tec@tech-software.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word"><div>I would like to say thank you the Californian individual that took the time and effort hack my little project </div><div><br></div><div>I have to now deal with 65,000 emails</div><div><br></div><div>You have restored my faith in humanity </div><div><br></div><div>A</div><div><br></div><br><div>
<div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div>------------------------------<wbr>------------</div><div>Andrew Rich VK4TEC</div><div>e<span class="m_-4666597449590503122Apple-converted-space"> </span><a href="mailto:vk4tec@internode.on.net" target="_blank">vk4tec@internode.on.net</a><span class="m_-4666597449590503122Apple-tab-span" style="white-space:pre-wrap"> </span></div><div>m 0419 738 223</div><div><a href="http://59.167.159.165" target="_blank">http://59.167.159.165</a></div><div><br></div></div></div></div></div></div></div></div><br class="m_-4666597449590503122Apple-interchange-newline">
</div>
<br></div><br>______________________________<wbr>_________________<br>
OZAPRS mailing list<br>
<a href="mailto:OZAPRS@aprs.net.au">OZAPRS@aprs.net.au</a><br>
<a href="http://lists.aprs.net.au/mailman/listinfo/ozaprs" rel="noreferrer" target="_blank">http://lists.aprs.net.au/<wbr>mailman/listinfo/ozaprs</a><br>
<br></blockquote></div><br></div>
</div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>OZAPRS mailing list</span><br><span><a href="mailto:OZAPRS@aprs.net.au">OZAPRS@aprs.net.au</a></span><br><span><a href="http://lists.aprs.net.au/mailman/listinfo/ozaprs">http://lists.aprs.net.au/mailman/listinfo/ozaprs</a></span><br></div></blockquote></body></html>