Full Disclosure mailing list archives
Re: Tool Release - Tor Blocker
From: Alexander Sotirov <asotirov () determina com>
Date: Sat, 03 Jun 2006 15:07:51 -0700
The purpose of this module is not to increase the security of your server, but to allow you to prosecute hackers after the fact. If your server has a remotely exploitable vulnerability and you block Tor nodes, you can still be hacked from any other IP address on the Internet. The only difference is that blocking Tor force the attackers to use a non-anonymized IP address, which can (at least theoretically) be traced back to them. I have doubts that this really makes a difference in practice. Blacklisting IP addresses is no substitute for actually fixing the vulnerabilities on your servers. Alex _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Tool Release - Tor Blocker Jason Areff (Jun 02)
- Re: Tool Release - Tor Blocker str0ke (Jun 02)
- Re: Tool Release - Tor Blocker Jason Areff (Jun 02)
- Re: Tool Release - Tor Blocker J.A. Terranson (Jun 03)
- Re: Tool Release - Tor Blocker Andrew Farmer (Jun 02)
- Re: Tool Release - Tor Blocker Valdis . Kletnieks (Jun 02)
- Re: Tool Release - Tor Blocker Jason Areff (Jun 03)
- Re: Tool Release - Tor Blocker Alexander Sotirov (Jun 03)
- Re: Tool Release - Tor Blocker Jacob Weeks (Jun 03)
- Re: Tool Release - Tor Blocker Tonnerre Lombard (Jun 03)
- RE: Tool Release - Tor Blocker php0t (Jun 03)
- Re: Tool Release - Tor Blocker Jason Areff (Jun 02)
- Re: Tool Release - Tor Blocker str0ke (Jun 02)
- Re: Tool Release - Tor Blocker Bill Weiss (Jun 03)
- Re: Tool Release - Tor Blocker Bill Weiss (Jun 03)
- Re: Tool Release - Tor Blocker Marco Ermini (Jun 03)
- RE: Tool Release - Tor Blocker Dixon, Wayne (Jun 05)
- Re: Tool Release - Tor Blocker John Sprocket (Jun 03)