How to discover if your linux box is hacked!

Interesting little piece. Guy has a linux box that is behaving badly. His friend, apparently more *nix knowledgeable than he, has an admin account on said box and starts poking around. Quickly he uncovers that the box has been compromised.

Here's the story: http://blog.gnist.org/article.php?story=HollidayCracking
Here's Schneier's take on it: http://www.schneier.com/blog/archives/2007/08/how_a_linux_ser.html

I'm sure there'll probably be a Slashdot story up soon. (not there right now, they're sometimes slow about posting stuff, or they have a big backlog or something)

Bush holds a press conference to discuss the latest threat to America!

Thanks, Triggur!