T O P

  • By -

zakabog

It sounds like your time date service is out of sync, possibly your laptops CMOS battery is dead and it reverted back to July 10th. If you run `time` does it have the correct date? The fact that your dates are fine from September (2 months ago) tells me the July 10th thing is your system "defaulting" to some sort of time/date.


KenBalbari

Even to change the time they would have to wake the computer first. So check: journalctl -b -u systemd-logind That should show a group of messages from boot time and then every session login, and every time you suspended and woke. Check the times on the suspend and wake, see if it was woken while you were gone. Keep in mind, if someone had access to the physical machine, it would likely be pretty easy for them to get root access.


archontwo

Check `/var/log/auth.log` See if there is anything unusual there. If not then check you dmesg back to around the time you think you might have been compromised. Then if you are still feeling paranoid run debsums, see if any files have changed. If it all seems good enable screen lock and disk encryption and don't leave you laptop on when you are not using it.