Re: FTP Brute-Force Attacks and Password Management Basics

["Sven Édouard" <sven_edouard () fastmail co uk>]

Very true, in some situations it can be difficult to perform audits like
these. I believe it is necessary to have scheduled password auditing
sessions where you try to break your own network before someone else
does.

Sven



On Tue, 18 Jul 2006 11:07:36 +0800, "Mark Ryan del Moral Talabis"
<talabis () gmail com> said:
> We have been picking up a lot of brute-force FTP login and
> authentication attempts against the Administrator account of our
> honeypots.This post  is just to remind administrators that sometimes,
> it is the small things that tend to make big holes. In this case, it
> is always a good idea to implement stricter measures in password usage
> particularly in setting up temporary passwords for new accounts.
>
> http://www.philippinehoneynet.org/data.php
>
> Ryan Talabis
-- 
  Sven Édouard
  sven_edouard () fastmail co uk

-- 
http://www.fastmail.fm - Access your email from home and the web


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------