Bugtraq mailing list archives
Re: fingerprinting BIND 9.1.0
From: Lucas Holt <luke () FOOLISHGAMES COM>
Date: Wed, 31 Jan 2001 14:13:07 -0500
Hiding a version number does not someone who knows what they are doing, but it does stop script kiddies out there. If a 14 year old kid can not figure out what they are dealing with, they will move on to easier targets. "William D. Colburn (aka Schlake)" wrote:
The FAQ file that comes with the distribution already covers all this. While it used to seem like a good idea to obfuscate version numbers, things like nmap can be written for just about any internet service which would make version obfuscation just a false sense of security. Even if your version is obscured, a known exploit will still work against it if someone tries. I agree with the BIND people that there isn't much point in hiding that information.
-- Lucas Holt Luke () FoolishGames com ___________________________________________________ http://www.foolishgames.com "The Macintosh software might have become the successor to MS-DOS. OS/2 or UNIX might have. As it happened, MS-DOS was succeeded by Windows..." --Bill Gates, The Road Ahead If Windows never happened, what would be on your desktop?
Current thread:
- fingerprinting BIND 9.1.0 Max Vision (Jan 30)
- Re: fingerprinting BIND 9.1.0 Eric Limpens (Jan 30)
- <Possible follow-ups>
- Re: fingerprinting BIND 9.1.0 buglist (Jan 30)
- Re: fingerprinting BIND 9.1.0 William D. Colburn (aka Schlake) (Jan 31)
- Re: fingerprinting BIND 9.1.0 Lucas Holt (Jan 31)
- Re: fingerprinting BIND 9.1.0 William D. Colburn (aka Schlake) (Jan 31)