1 2 3 Previous Next 39 Replies Latest reply: Apr 29, 2012 8:48 PM by softwater Go to original post
  • 15. Re: Easter Egg or Hacker?
    softwater Level 5 Level 5 (5,370 points)

    BTW, what if anything did you find in the preferences pane that Linc mentioned? Did it contain the 'pleb' message?

  • 16. Re: Easter Egg or Hacker?
    softwater Level 5 Level 5 (5,370 points)

    One further thought. In Activity Monitor, just check for a process called

     

    ABK

     

    It's a keylogger that could give someone access to your machine remotely.

  • 17. Re: Easter Egg or Hacker?
    Icarus8 Level 1 Level 1 (0 points)

    The plebb message was typed into the preference pane that linc mentioned.

     

    I checked for ABK and couldn't see it running in processes I have little snitch running (and have for some time).

    But still feeling pretty paranoid about the whole thing.

     

    is there any behaviour I should be looking out for?

  • 18. Re: Easter Egg or Hacker?
    Csound1 Level 8 Level 8 (35,445 points)

    ds store wrote:

     

    Plebb - somebody who is complete crap at everything and cant do anything right, and to be honest is a complete noob at everything. generally used as an insult

     

    I doubt Apple would include that as a log in screen message, thus you've been pwned.

     

     

    Most commonly used backup methods explained

     

    How to reinstall just OS X or erase/install OS X

    Pleb is a contraction of Plebeian, it is synonymous with Prole (from Proletariat), DS Store, what dictionary did you get that definition from?

  • 19. Re: Easter Egg or Hacker?
    Linc Davis Level 10 Level 10 (118,290 points)

    Someone or something entered that message into the preference pane. That action involves either physical access or root access. If you don't know how it happened, you can make any assumption you want about what else might have been done, and what the consequences might be. Certainly the person or thing could have read, changed, or removed any file on the system.

     

    There is absolutely no reason to believe that any "anti-virus" software would be able to detect changes that might have been made to your system, such as the installation of a keylogger. "Anti-virus" software only detects malware circulating on the Internet. If physical access was the means of attack, that kind of information is completely irrelevant.

     

    If there's sensitive information on your machine, you should assume that it has been compromised and act accordingly. What that means in practice is up to you.

  • 20. Re: Easter Egg or Hacker?
    softwater Level 5 Level 5 (5,370 points)

    Ds Store's definition is the right definition for the way its used in England as slang for an idiot. As I already said, it was common a couple of decades ago. I wouldn't expect script kiddies to be using it. It's a bit lame these days as far as an insult goes, unless you were brought up in the 80s, in England, and probably from a well-educated background.

  • 21. Re: Easter Egg or Hacker?
    Csound1 Level 8 Level 8 (35,445 points)

    You were in England during the 80's? or did you read this somewhere?

  • 22. Re: Easter Egg or Hacker?
    thomas_r. Level 7 Level 7 (27,960 points)

    You were in England during the 80's? or did you read this somewhere?

     

    Is it relevant to the original poster's question?

  • 23. Re: Easter Egg or Hacker?
    Linc Davis Level 10 Level 10 (118,290 points)

    Is it relevant to the original poster's question?

     

    Let it go. I'm going to use this as the plot for the next Sherlock Holmes movie. I'm doing lunch with Robert Downey's agent tomorrow.

  • 24. Re: Easter Egg or Hacker?
    jsd2 Level 5 Level 5 (6,200 points)

    I wonder if there is any chance that the message was put there before you upgraded to Lion - if you normally use automatic login you might not have seen the login window for a while.

     

    The System Preferences GUI for adding such a message is new in Lion, but it's been possible to do this in previous OS versions as well, by modifying  this preference file in the main Library:

     

    HD > Library > Preferences >  com.apple.loginwindow.plist

     

    This can be done via Terminal, or more easily, in Onyx (Parameters>Login tabs).

     

    Since you have Time Machine backups from before you updated, it might be of interest to enter Time Machine and navigate to an earlier version of that  com.apple.loginwindow.plist file. You don't need to restore it - just highlight it and press <spacebar> to quick-look it from within Time Machine, looking for an entry like:

     

    <key>LoginwindowText</key>

      <string>Welcome Plebb</string>

  • 25. Re: Easter Egg or Hacker?
    softwater Level 5 Level 5 (5,370 points)

    Csound1 wrote:

     

    You were in England during the 80's? or did you read this somewhere?

     

    Yes I was. And the 60s, 70, 90s and early 2000s.

     

    It may be relevant to the OP, which is why I mentioned back on page 1, because its such a regional and time-specific term (when used as an insult) that it likely gives away the identity of the hacker/intruder as both English and in their late 30s early 40s.

  • 26. Re: Easter Egg or Hacker?
    Linc Davis Level 10 Level 10 (118,290 points)

    Working title: "The Case of the Interpolated Login Message." I'm thinking Noomi Rapace as the villain.

  • 27. Re: Easter Egg or Hacker?
    Csound1 Level 8 Level 8 (35,445 points)

    Thomas A Reed wrote:

     

    You were in England during the 80's? or did you read this somewhere?

     

    Is it relevant to the original poster's question?

     

    As it has been suggested that it may help to identify the miscreant, yes.

  • 28. Re: Easter Egg or Hacker?
    Csound1 Level 8 Level 8 (35,445 points)

    softwater wrote:

     

    Csound1 wrote:

     

    You were in England during the 80's? or did you read this somewhere?

     

    Yes I was. And the 60s, 70, 90s and early 2000s.

     

    It may be relevant to the OP, which is why I mentioned back on page 1, because its such a regional and time-specific term (when used as an insult) that it likely gives away the identity of the hacker/intruder as both English and in their late 30s early 40s.

    You acquaintances in the UK must be very reserved, Pleb was not an insult when I lived there (50's to 90's)

     

    All the insults I remember from the UK come out like this ****** if an attempt to use them on this site is made.

  • 29. Re: Easter Egg or Hacker?
    softwater Level 5 Level 5 (5,370 points)

    Downey? You haven't really done your research have you?

     

    http://www.bbc.co.uk/pressoffice/pressreleases/stories/2011/05_may/16/sherlock.s html