[SAC] High load "geotools" job on osgeo6: cryptonight at work

[Harrison Grundy]

Or added one whenever they got in... would we notice?

Sent from my iPhone

> On Sep 17, 2018, at 9:06 PM, Jürgen E. Fischer <jef at norbit.de> wrote:
> 
> Hi Sandro,
> 
> On Mon, 17. Sep 2018 at 10:43:48 +0200, Sandro Santilli wrote:
>>> root     pts/0        .............    Thu Sep 13 13:33 - 13:34  (00:00)
>>> jmckenna pts/0        .............    Tue Sep 11 05:37 - 20:25  (14:48)
>>> jmckenna pts/0        .............    Mon Sep 10 11:15 - 13:27  (02:11)
>>> geotools pts/0        104.239.230.121  Mon Sep 10 11:09 - 11:12  (00:03)
>>> root     pts/0        ...............  Mon Sep 10 11:07 - 11:08  (00:00)
>>> 
>>> 
>>> I suggest that we put stronger measures this time:
>>> Can we now agree that a password reset may be a good idea? Or, ssh key only.
>> 
>> Please go ahead with a a password reset, but maybe don't send the
>> password by mail (the password reset script should print the temporary
>> password to stdout for you to send securely to a trusted party).
> 
> Apparently they did have a key:
> 
> Sep 10 11:09:10 osgeo6 sshd[1150]: Accepted publickey for geotools from 104.239.230.121 port 33281 ssh2: RSA cf:34:61:aa:48:e1:f2:20:16:6e:dc:c1:80:e1:8e:fe
> 
> 
> Jürgen
> 
> -- 
> Jürgen E. Fischer           norBIT GmbH             Tel. +49-4931-918175-31
> Dipl.-Inf. (FH)             Rheinstraße 13          Fax. +49-4931-918175-50
> Software Engineer           D-26506 Norden             http://www.norbit.de
> norBIT Gesellschaft fuer Unternehmensberatung und Informationssysteme mbH
> Rheinstrasse 13, 26506 Norden
> GF: Jelto Buurman, HR: Amtsgericht Aurich HRB 100827
> Datenschutzerklaerung: https://www.norbit.de/83/
> _______________________________________________
> Sac mailing list
> Sac at lists.osgeo.org
> https://lists.osgeo.org/mailman/listinfo/sac