X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=-0.9 required=5.0	tests=AWL,BAYES_05,RCVD_IN_DNSWL_NONE,T_RP_MATCHES_RCVD
X-Spam-Check-By: sourceware.org
X-Authority-Analysis: v=1.0 c=1 a=RR8PtxibHNUA:10 a=8nJEP1OIZ-IA:10 a=ZjwK-fepQSYR8wF2IfoA:9 a=yMiFjAgVgJy8J05qzZJeU11VBRcA:4 a=wPNLvfGTeEIA:10
Message-ID: <4CA15E8B.5070602@charter.net>
Date: Mon, 27 Sep 2010 23:18:35 -0400
From: SJ Wright <sjwright68 AT charter DOT net>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.24) Gecko/20100228 Thunderbird/2.0.0.24 Mnenhy/0.7.6.666
MIME-Version: 1.0
To: Cygwin User Mailing List <cygwin AT cygwin DOT com>
Subject: What does this look like to you folks.
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

First, a little background:

In quite a few previous edits of my .bash_aliases file, I've used the 
same alias to cd to a particular folder. Tonight I typed it in and got 
the following as a return:
> [/cygdrive/c/blu/newest]
> mintty-cygwin>>smith
> + laugh
> + pwd
> /cygdrive/c/blu/newest
> + cd /cygdrive/c/taiga/
> + pwd
> /cygdrive/c/taiga
> + cd /cygdrive/c/taiga
> [/cygdrive/c/blu/newest]
When I went to view .bash_aliases in nano, the alias 'smith' (changed at 
my prerogative for discussion on this list) was missing. As far as I 
know, it was there as recently as 5 AM today; I believe I used it around 
noon today (27 September) as well.

Should I be worried? I've never heard of Cygwin being a target for  
--the precise term escapes me at the moment so I'll say-- this kind of 
intrusion, if that's what it is.  As for potential "routes in," I have 
sshd running on cygrunsrv but nothing else. Time to change my login 
password, maybe?

Steve W.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple