Re: Need urgent help regarding security

From: Peter C. Lai (sirmoo_at_cowbert.2y.net)
Date: 11/21/05

  • Next message: Matthew D. Fuller: "Re: mount -u -r drops nosuid ?" 
    Date: Mon, 21 Nov 2005 15:42:39 -0500
To: Bigby Findrake <bigby@ephemeron.org>

    On Mon, Nov 21, 2005 at 12:35:44PM -0800, Bigby Findrake wrote:
    > I'd just like to make a small contribution to this discussion.
    >
    > While most of us understand the merits and flaws of security through
    > obscurity, I would like to point out the semantic fact that the phrase is,
    > indeed, "security *through* obscurity", that while not flawless, obscurity
    > is another path to security, that it is (more) difficult to attack the
    > host you cannot see, (more) difficult to exploit the flaw you cannot
    > detect, (more) difficult to connect to the daemon you do not know is
    > listening.
    >

    You can also couple this with port-knocking (or even just port-knocking
    on 22).

    >
    >
    > /-------------------------------------------------------------------------/
    > I was raised by a pack of wild corn dogs.
    >
    > finger://bigby@ephemeron.org
    > http://www.ephemeron.org/~bigby/
    > news://news.ephemeron.org/alt.lemurs
    > /-------------------------------------------------------------------------/
    >
    > _______________________________________________
    > freebsd-security@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-security
    > To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org" 

    -- 
Peter C. Lai
Dept. of Neurobiology
Yale University School of Medicine
http://cowbert.2y.net/
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
  • Next message: Matthew D. Fuller: "Re: mount -u -r drops nosuid ?"

    Relevant Pages

    • Re: Need urgent help regarding security
      ... While most of us understand the merits and flaws of security through ... obscurity, I would like to point out the semantic fact that the phrase is, ...
      (FreeBSD-Security)
    • Re: To Anyone who has Internet Explorer Installed or any other browser (Everybody)
      ... know the first thing about security. ... know about plans, fixes, manufacturer data, and -- perhaps most ... features) has less chance of dangerous flaws. ... why is it that Microsoft is STILL ...
      (alt.computer.security)
    • <<SBS news this week - August 20, 2004>>
      ... Should I wait until my vendors approve SP2? ... Asks how can Microsoft improve newsgroups? ... Possible security breach seen at AOL ... Download.Ject takes advantage of one of the flaws ...
      (microsoft.public.backoffice.smallbiz)
    • <<SBS news this week - August 20, 2004>>
      ... Should I wait until my vendors approve SP2? ... Asks how can Microsoft improve newsgroups? ... Possible security breach seen at AOL ... Download.Ject takes advantage of one of the flaws ...
      (microsoft.public.backoffice.smallbiz2000)
    • <<SBS news this week - August 20, 2004>>
      ... Should I wait until my vendors approve SP2? ... Asks how can Microsoft improve newsgroups? ... Possible security breach seen at AOL ... Download.Ject takes advantage of one of the flaws ...
      (microsoft.public.windows.server.sbs)