Full Disclosure mailing list archives

Re: OpenSSH is a good choice?


From: Willem Koenings <infsec () gmail com>
Date: Wed, 22 Dec 2004 00:36:58 +0200

on Tue Dec 21 14:54:44 EST 2004, Ron DuFresne wrote

the non std port advice is not worth much, security through
obscurity kinda thing.

wrong. non standard port helps quite well against automated scans.
most targets nowadays are searched via automated scans. if you are
painted red, you get attention. this is first step - stay gray. but if
you are already set up as a target, this would not help you. this
helps you NOT getting up as target for someone, who just searching
some servers for fun - scriptkiddies.

W.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: