technology

22835 readers

1 users here now

On the road to fully automated luxury gay space communism.

Spreading Linux propaganda since 2020

Rules:

1. Obviously abide by the sitewide code of conduct. Bigotry will be met with an immediate ban
2. This community is about technology. Offtopic is permitted as long as it is kept in the comment sections
3. Although this is not /c/libre, FOSS related posting is tolerated, and even welcome in the case of effort posts
4. We believe technology should be liberating. As such, avoid promoting proprietary and/or bourgeois technology
5. Explanatory posts to correct the potential mistakes a comrade made in a post of their own are allowed, as long as they remain respectful
6. No crypto (Bitcoin, NFT, etc.) speculation, unless it is purely informative and not too cringe
7. Absolutely no tech bro shit. If you have a good opinion of Silicon Valley billionaires please manifest yourself so we can ban you.

founded 4 years ago

MODERATORS

[email protected]

what to do with a machine that I KNOW is compromised (hexbear.net)

submitted 7 months ago by [email protected] to c/[email protected]

5 comments fedilink hide all child comments

SO my dumb ass ran babyFTP in windows 11 with all permissions without switching from home network to mesh network. everything was normal until my transfer suddenly stopped and when I went to restart the server it said "7 connections terminated" lenin-dont-laugh

SO what now? it had a browser vault and what I assume are decrypted emails via the Microsoft mail.

Should I dd it and do ~forensics~ as to what ran in powershell and what files changed most recently?

Nuke and pave?

is EVERY password in that browser vault burned?

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 12 points 7 months ago* (last edited 7 months ago)

Yeah, the safe path is to nuke the machine and consider all passwords compromised

What do you mean by "without switching from home network to mesh network"? What network was the system connected to? Also if you had a transfer running some FTP clients will open multiple connections to the server which could explain your "7 connections terminated" message. Can you check the FTP server logs to see what exactly happened?