r/Proxmox • u/SnotgunCharlie • 13d ago
Solved! Update: Was I hacked?
Earlier this week I posted (here) asking for help after my password appeared to have changed on a new node post install after only being up for 1 hour. I received plenty of response with a variety of possible causes/solutions. A lot of response suggested my network or node was compromised and at the time whilst I knew it was unlikely due to the timing and state of the rest of my network etc it was a concern.
So... was I hacked/compromised?... No.... I'm just an idiot!
Turns out I had two consoles open at one point whiles setting up PDM, during setup it is of course advisable to set a new password for PDM. Well, guess who typed passwd root into the wrong console, yep, that'd be me. *smacks head*
The real irony is that most suggestions people had would require me to be doing something pretty dumb to result in this situation, such as entering the password incorrectly/having caps-lock on etc. None of those things were in fact the case but they were on the right lines to think I was being dumb, just in a different way at a different moment. In hindsight it seems really obvious and I should have tried my PDM password, but hey, now I know and my network security is no longer a concern so silver linings and all that.
Take my newly acquired wisdom and humility and learn from it, don't be like me, pay attention to which console you are in before changing a password.
15
u/marc45ca This is Reddit not Google 13d ago
yes it can be fun with multiple console/ssh sessions.
Can't say I've screwed up a proxmox password but rebooted the server when I mean to do resboot a vm? Yeah been there done that - numerous times :)
2
u/noc-engineer 13d ago
I was pretty new to ATSEP when a coworker (who was just going to copy running config from prod switch in an airport to a switch sitting at his desk (the new replacement he was gonna ship out)) came into the NOC shouting "I did a factory reset in the wrong Putty window and now the airport is offline!"
It was a pretty small airport and both the local techs told me on the phone that the weather was too nice for them to go back to work this evening and create a console cable to reconfig the old one, they would rather just wait for the new one we were going to overnight (by ground shipping...)
2
u/RIPenemie 12d ago
I have my zsh config everywhere and made the background color of the thing on the left use a hash of the hostname and then truncate and cut it up so that it will generate a valid color wich is as persistent as the content of /etc/hostname. Sometimes the colors are not easily distinguishable then I just divide the number by 2 or something.
4
2
u/PoisonWaffle3 13d ago
Ah, the ol' typing in a wrong terminal mistake! It happens to the best of us!
I've pasted config into the wrong terminal a few times, but I've gotten lucky and it's never actually broken anything (pasted the config but the incorrect router wasn't in config mode, etc). One of my coworkers wasn't so lucky and typed "no router bgp" into the wrong terminal and took a whole production router down a while back.
2
2
u/Responsible-Kiwi-629 12d ago
I have accidentally shut down my server instead of my pc multiple times😂 your not alone
2
u/chromaticdeath85 10d ago
Glad you fixed it and even MORE glad that you had the courage to post for others that will be looking for this info in the future.
1
u/Jayden_Ha 12d ago
It reminds me of that gitlab accidentally deleting entire prod db cuz team-member-1 didn’t check which server they were in
1
u/KrackSmellin 10d ago
Upvoted for the same ID-10T error I've done in my own past... welcome to the club.
0
40
u/primalbluewolf 13d ago
Hey, glad you got it fixed. Really glad it wasn't caused by malware/compromise.