Puzzle of the Day

You have reason to suspect that someone improperly accessed your account last night. You are on a UNIX system.

  1. If you believed the attacker changed one or more files, where would you look to see what he or she had done? What information would help you narrow down this answer?
  2. Now suppose you did not think the attacker had changed any of your files. Would this change your answer to question 1, and if so how?


You can also see this document in its native format, in Postscript, in PDF, or in ASCII text.
Send email to cs153@csif.cs.ucdavis.edu.

Department of Computer Science
University of California at Davis
Davis, CA 95616-8562



Page last modified on 11/12/98