2/26    Wasn't csua passwd was compromised the other time?  Could the hacker
        had placed some program on csua that snoops our email?  I think my
        email account has been snooped on.  I send out a email to a friend
        giving him my server ip and port, but someone else visited my server
        since my friend was not able to access my server.  I got a foreign
        ip accessed my server.
        \_ obUsePGP!
        \_ obUsePGP! If you send messages in the clear anyone can read them.
          \_ PGP is useless until it is made more transparent. Even the people
             who invented it have agreed on this. The existing tools are simply
             too difficult to use and even people with clue end up sending
             clear text or gibberish by accident half the time.
             \_ The 'people'?  Perhaps you mean the person, namely Phil
                Zimmerman?  And what you've just suggested does not sound
                very much like the sort of thing Phil Zimmerman would say.
                Could you post a citation so we know you're not talking out of
                your ass here?  If you are just talking out of your ass, could
                you make a point of sticking your head up your ass before
                doing this in the future so we don't have to listen to your
                blather?  Thanks.
                \_ <Sigh> The most notable "blather" is Whitten & Tygar (1999).
                   cited in the GNU privacy handbook, chapter 5.
                   cited in the GNU privacy handbook, chapter 5. You are, of
                   course, correct that it does not very much sound like
                   something Phil Zimmerman would say.
        \_ What makes you think it's not a problem on your friend's end?
           \_ it may be possible too since the company uses MS Exchange and
              Outlook, but they are very good at patching up the security
              holes. =D  Have you ever had nimda.a/e on you machine? if you
              see httpodbc.dll in all your root drives, your machine is
              infected with nimda.e.  Most likely a hacker has already placed
              a backdoor in your computer...
        \_ More likely you were just port scanned.
          \_ but he wouldn't know the exact path of the file to call even he
          finds out that port is open.  I had NAT forward that port to my
          my server.  And the web app is under a specific context-root, also
          the file is has a unique url mapping.  I see the visitor access
          that exact path right after my email went out (well a few minutes
          later).
          \_ Foreign eh? Which country?
             \_ foreign=alien=non-local
        \_ You really should email root about this.
           \_ Ya, that way root will be more careful about reading ppl's email.
              Seriously though, what are the odds of someone having the
              patience to go through and read your email? Did you look in your
              apache logs to see what IP it was that looked up your site?
                \_ Don't knock the propensity of individuals to do what normal
                   people like you and I would consider a complete lack of a
                   life for intrusive purposes.  Security through obscurity
                   or even anonymity is not a good idea.  -John
              \_ last time I checked the IP belonged to http://prophetfinance.com, I
              took a look at it subnet ips, they tranlated to greet, pride,
              lust, stalin, roosevelt, churchill, etc <DEAD>.prophetfinance.com<DEAD>. It
              is probably managed by some Russian sys-admin since he seems to
              name the servers with Russian leaders.
              \_ Churchill and greet are my favorite Russian leaders!
                \_ Okay, machines with people names are name of Russsian
                leaders.  Damn, always some block head nit-picking posts while
                totally ignoring the main point
                \_ if you use a completely specious argument to back up your
                   contention that it's a Russian sysadmin and you get called
                   on it, I don't think it qualifies as nit-picking
        \_ What is your site anyway?
          \_ just some stuff to test my web configuration.