On 17-3-2009 23:00, Jim Henderson wrote:
> On Tue, 17 Mar 2009 21:17:29 +0100, andrel wrote:
> 
>> Some
>> indication may be in how long it takes to get the system running again,
>> if that is more than a few days, the owner was probably innocent.
> 
> That's not a very good indication; reinstalling an OS is easy. 

Indeed, that is what I was thinking, so if they take a long time they 
are most probably amateurs who unknowingly left open a door to intruders 
(they did, we know that) and let other use their system.
If they reinstall fast they have either good support or are knowing 
themselves. I would not take a bet on that, so my guess was that only a 
long time before the IP can be pinged would mean something.
Other theories welcome.

Post a reply to this message