|
|
|
|
||||
|
Welcome to the GoFuckYourself.com - Adult Webmaster Forum forums. You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today! If you have any problems with the registration process or your account login, please contact us. |
 |
|
|||||||
| Discuss what's fucking going on, and which programs are best and worst. One-time "program" announcements from "established" webmasters are allowed. |
|
|
Thread Tools |
11-11-2015, 05:24 PM
|
#1 |
|
Confirmed User
Industry Role:
Join Date: Jun 2014
Posts: 127
|
Think i got hacked - at my terminal
Hi
I think i've recently been hacked, in the sense that someone has been using my computer and copied some files. Im using Mac OS. I was out all day and when i came back one of my contracts was open in Word. I went into view > order by last opened and saw that many folders had been opened, but no actual files (apart from the one mentioned). So, because no files had been opened, i assume they actually copied the files to a drive or USB stick. Is there a way of checking if anything was copied, or if any other USB drives had been used? Or are there anymore detailed MacOS logs? Cheers Rich |
|
|
|
11-11-2015, 05:27 PM
|
#2 |
|
Confirmed User
Join Date: Dec 2006
Posts: 1,497
|
I was frikkin sure this thread was also about fallout 4.......
__________________
¤´¨) ¸.•´¸.•*´¨) ¸.•*¨) (¸.•´ (¸.•`¤ICQ:491 496 482 |
|
|
|
|
11-11-2015, 05:28 PM
|
#3 | |
|
So Fucking Banned
Industry Role:
Join Date: Nov 2015
Posts: 1,418
|
Quote:
 Was your monitor also missing? |
|
|
|
|
|
11-11-2015, 05:33 PM
|
#4 | |
|
Confirmed User
Industry Role:
Join Date: Jun 2014
Posts: 127
|
Quote:
I work in a shared office. - I use a 32 inch TV, and when i left, instead of turning the computer off i just hit power off monitor. It my own fault, i just want to know if there is any way of checking if any of the files were actually taken. |
|
|
|
|
|
11-11-2015, 08:28 PM
|
#5 |
|
It's 42
Industry Role:
Join Date: Jun 2010
Location: Global
Posts: 18,083
|
were you logged in without the screen lock on?
~$ stat [/path/file] example: I just opened the file now! copy would not show here Code:
barry@deathstar8:~/Documents/SEO$ stat pdf-seo-in-practice.pdf File: ?pdf-seo-in-practice.pdf? Size: 10312581 Blocks: 20144 IO Block: 4096 regular file Device: 805h/2053d Inode: 17171290 Links: 1 Access: (0640/-rw-r-----) Uid: ( 1000/ barry) Gid: ( 1000/ barry) Access: 2015-10-13 20:15:10.776765541 -0400 THEN Modify: 2015-10-13 20:12:32.502313729 -0400 Change: 2015-10-13 20:13:07.073977604 -0400 Birth: - barry@deathstar8:~/Documents/SEO$ stat pdf-seo-in-practice.pdf File: ?pdf-seo-in-practice.pdf? Size: 10312581 Blocks: 20144 IO Block: 4096 regular file Device: 805h/2053d Inode: 17171290 Links: 1 Access: (0640/-rw-r-----) Uid: ( 1000/ barry) Gid: ( 1000/ barry) Access: 2015-11-11 22:22:24.841280945 -0500 NOW! Modify: 2015-10-13 20:12:32.502313729 -0400 Change: 2015-10-13 20:13:07.073977604 -0400 Birth: - barry@deathstar8:~/Documents/SEO$ but Apple is proprietary UNIX -- same or similar CLI command in terminal? Also check your logs for logins if the screen was locked ~$ tac /var/log/auth.log or similar (again GNU/LINUX path) |
|
|
|
