suspicious busybox history
 

hi guys I noticed text in my power busybox that I never typed. One entry is 'smartcrash' what's that? also lots of blocks of text of what looks like stuff I've typed and bits of text from SMSs I sent in the past, I even see my phone number in there. All delimited by question marks. Any ideas what's doing this? any info is much appreciated.
I have cssu testing, pk51, opera 12, yappari running.
Thanks
Giles.

Re: suspicious bash history
 

There is not much info in your post about version of bash, of busybox-power and yappari info.
For starters please:Did you check the file ash_history or other history files for this stuff?
Or did you just hit 'Up' in X-Terminal again and again?

Re: suspicious bash history
 

OK, always pretty much up to date, see below. I saw it only when hitting Up in terminal, no text in ash history. Shame i closed the terminal and lost the evidence!

bash
Installed: (none)
Candidate: 2.05b-26osso7+0m5
Version table:
2.05b-26osso7+0m5 0
500 https://downloads.maemo.nokia.com ./ Packages
bash3:
Installed: (none)
Candidate: 3.2-0maemo10
Version table:
3.2-0maemo10 0
500 http://repository.maemo.org fremantle-1.3/free Packages
500 http://repository.maemo.org fremantle/free Packages
500 http://repository.maemo.org fremantle/free Packages
bash4:
Installed: (none)
Candidate: 4.2.37-1
Version table:
4.2.37-1 0
500 http://repository.maemo.org fremantle/free Packages
4.2.20-1 0
500 http://repository.maemo.org fremantle-1.3/free Packages
500 http://repository.maemo.org fremantle/free Packages
busybox-power:
Installed: 1.20.2power5
Candidate: 1.20.2power5
Version table:
*** 1.20.2power5 0
500 http://repository.maemo.org fremantle/free Packages
100 /var/lib/dpkg/status
1.20.2power4+thumb0 0
500 http://maemo.merlin1991.at fremantle/free Packages
1.20.2power4 0
500 http://repository.maemo.org fremantle-1.3/free Packages
500 http://repository.maemo.org fremantle/free Packages
500 http://repository.maemo.org fremantle/free Packages
1.20.2power3 0
500 http://repository.maemo.org fremantle/free Packages
1.20.2power2 0
500 http://repository.maemo.org fremantle/free Packages
yappari:
Installed: 0.0.26
Candidate: 0.0.26
Version table:
*** 0.0.26 0
100 /var/lib/dpkg/status

Re: suspicious bash history
 

Check the files .ash_history and /root/ash_history

Some weird speculation for you to rethink about:
Sometimes a copy and paste in the wrong application, like X-Terminal application, might happen... did it may be?

Another possibility might be related to that yappari application, being related to the smartcrash app for apple products

Re: suspicious bash history
 

If you are using bash, your history won't be in .ash_history. but in .bash_history.

You history should be saved when you exit your terminal, so your "evidence" should still be there. Typing 'history' should show your command history also. Didn't you simply paste some text in the terminal on accident like michaaa62 also suggests?

Furthermore: are you using an ssh server and where you user or root?

Re: suspicious bash history
 

Why not searching/asking in busybox power thread?
There was (now will be again) a discussion about a bug of scrambled history, which should have been solved. But seems like we are hit again. It happened to me a few times (weird history with text of mails, SMS, ...), but not lately (not in the last few months), so report it there and we will see.

--edit
And I assume you have been using ash (standard x-term) and not bash, right?

Re: suspicious bash history
 

AFAIK if you kill terminal the history isn't saved only closing terminal with exit should save to .ash_history

Re: suspicious bash history
 

And I now see you have not installed bash, so your thread name is not correct.

Edit: I like your reason for changing the thread title:

Re: suspicious bash history
 

No, definitely not copy/paste, like I said, text was question mark delimited, some words i recognised from my SMS history, some words not, also some mention of user/password which is worrying. This was in user not root. ssh server is running but only public key auth. allowed. I don't have .bash_history only .ash_history and nothing interesting is in there.

Re: suspicious busybox history
 

Do I need to point you to the bb-power thread?
Please read/search there and you will find exact same symptoms described (also by me)...

@six
No, since latest (pre-latest) update history is written directly, not at shutdown (also to hinder this bug to pop up.

@ade
Correct!

@gilesn
Please try to remember all steps you have done. And describe your experience in mentioned thread!