Bugtraq mailing list archives

Re: fingerprinting BIND 9.1.0


From: Lucas Holt <luke () FOOLISHGAMES COM>
Date: Wed, 31 Jan 2001 14:13:07 -0500

Hiding a version number does not someone who knows what they are doing, but it
does stop script kiddies out there.  If a 14 year old kid can not figure out what
they are dealing with, they will move on to easier targets.

"William D. Colburn (aka Schlake)" wrote:

The FAQ file that comes with the distribution already covers all this.
While it used to seem like a good idea to obfuscate version numbers,
things like nmap can be written for just about any internet service
which would make version obfuscation just a false sense of security.
Even if your version is obscured, a known exploit will still work
against it if someone tries.  I agree with the BIND people that there
isn't much point in hiding that information.



--

Lucas Holt
Luke () FoolishGames com
___________________________________________________
http://www.foolishgames.com

"The Macintosh software might have become the successor to MS-DOS.
OS/2 or UNIX might have.  As it happened, MS-DOS was succeeded by Windows..."
        --Bill Gates, The Road Ahead

If Windows never happened, what would be on your desktop?


Current thread: