'J Random User' Account Appeared on list of users?

[bashiergui]

None of that looked concerning. Multiple users having the same odd behavior make it unlikely that this is malicious. It looks a lot like a placeholder in dev code that went to production without being fixed.

[Piesu]

It looks a lot like a placeholder in dev code that went to production without being fixed.

I was thinking same thing, but wasn't able to find such string in sources. But maybe I wasn't able to find correct sources, as this problem could be created by many programs.

Anyway, I didn't found other sensible way of unprivileged person getting into my system other then firefox or repository, I don't understand why he would like to show me that he get into, and didn't found anything else suspicious on computer.


Anyway, installed new system, I must be able to trust system.

Anybody was able to find such string in any source code?

[bashiergui]

If you see the behavior again take some screen shots and submit a bug report to launchpad. Let the devs find it.

[fdsuufijjejejejej]

Just noticed this on 13.10... it's incredibly alarming

users.png



No other users are listed in the "Users" section.



awk -F":" '{ print "Linux_name: " $1 "\t\tFull_Name: " $5 }' /etc/passwd yields:

Linux_name: root        Full_Name: root
Linux_name: daemon        Full_Name: daemon
Linux_name: bin        Full_Name: bin
Linux_name: sys        Full_Name: sys
Linux_name: sync        Full_Name: sync
Linux_name: games        Full_Name: games
Linux_name: man        Full_Name: man
Linux_name: lp        Full_Name: lp
Linux_name: mail        Full_Name: mail
Linux_name: news        Full_Name: news
Linux_name: uucp        Full_Name: uucp
Linux_name: proxy        Full_Name: proxy
Linux_name: www-data        Full_Name: www-data
Linux_name: backup        Full_Name: backup
Linux_name: list        Full_Name: Mailing List Manager
Linux_name: irc        Full_Name: ircd
Linux_name: gnats        Full_Name: Gnats Bug-Reporting System (admin)
Linux_name: nobody        Full_Name: nobody
Linux_name: libuuid        Full_Name: 
Linux_name: syslog        Full_Name: 
Linux_name: messagebus        Full_Name: 
Linux_name: usbmux        Full_Name: usbmux daemon,,,
Linux_name: dnsmasq        Full_Name: dnsmasq,,,
Linux_name: avahi-autoipd        Full_Name: Avahi autoip daemon,,,
Linux_name: kernoops        Full_Name: Kernel Oops Tracking Daemon,,,
Linux_name: rtkit        Full_Name: RealtimeKit,,,
Linux_name: whoopsie        Full_Name: 
Linux_name: speech-dispatcher        Full_Name: Speech Dispatcher,,,
Linux_name: avahi        Full_Name: Avahi mDNS daemon,,,
Linux_name: lightdm        Full_Name: Light Display Manager
Linux_name: pulse        Full_Name: PulseAudio daemon,,,
Linux_name: hplip        Full_Name: HPLIP system user,,,
Linux_name: colord        Full_Name: colord colour management daemon,,,
Linux_name: saned        Full_Name: 
Linux_name: ainola        Full_Name: Ainola
Linux_name: ntp        Full_Name:

Likely a gnome dev inserting test code as was mentioned above: https://en.wikipedia.org/wiki/J._Random_Hacker