Full Disclosure mailing list archives
Re: OpenSSH is a good choice?
From: Ron DuFresne <dufresne () winternet com>
Date: Wed, 22 Dec 2004 02:40:25 -0600 (CST)
On Wed, 22 Dec 2004, Willem Koenings wrote:
on Tue Dec 21 14:54:44 EST 2004, Ron DuFresne wrotethe non std port advice is not worth much, security through obscurity kinda thing.wrong. non standard port helps quite well against automated scans. most targets nowadays are searched via automated scans. if you are painted red, you get attention. this is first step - stay gray. but if you are already set up as a target, this would not help you. this helps you NOT getting up as target for someone, who just searching some servers for fun - scriptkiddies.
I'd disagree in that the tools are getting to be well enough defined that we are all targets. Best game is to restrict who has access to the ports being served whenever possible, openssh has a history that makes this a good service to limit this way. Little need to hide what's not openly allowed to all. Thanks, Ron DuFresne -- "Sometimes you get the blues because your baby leaves you. Sometimes you get'em 'cause she comes back." --B.B. King ***testing, only testing, and damn good at it too!*** OK, so you're a Ph.D. Just don't touch anything. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- OpenSSH is a good choice? Carlos de Oliveira (Dec 20)
- Re: OpenSSH is a good choice? Andrew Farmer (Dec 20)
- Message not available
- Re: OpenSSH is a good choice? Carlos de Oliveira (Dec 21)
- Re: OpenSSH is a good choice? hutuworm (Dec 21)
- RE: OpenSSH is a good choice? ALD, Aditya, Aditya Lalit Deshmukh (Dec 21)
- RE: OpenSSH is a good choice? Ron DuFresne (Dec 21)
- Re: OpenSSH is a good choice? Willem Koenings (Dec 21)
- Re: OpenSSH is a good choice? Ron DuFresne (Dec 22)
- Re: OpenSSH is a good choice? Willem Koenings (Dec 23)
- Re: OpenSSH is a good choice? Ron DuFresne (Dec 23)
- Re: OpenSSH is a good choice? Ben Hawkes (Dec 24)
- Re: OpenSSH is a good choice? Willem Koenings (Dec 24)
- Re: OpenSSH is a good choice? Ron DuFresne (Dec 25)
- Re: OpenSSH is a good choice? Kevin (Dec 25)
- Re: OpenSSH is a good choice? Ron DuFresne (Dec 27)
- Re: OpenSSH is a good choice? Stian Øvrevåge (Dec 24)
- Re: OpenSSH is a good choice? dk (Dec 24)