3 ms·
The first step of an attack is reconnaissance. How is making that step very easy for an attacker best practice?
by 1ba9115454 9y ago
The first step of an attack is reconnaissance.
How is making that step very easy for an attacker best practice?
- dijit 9y agoIf the only thing keeping your attacker out is that they can't do recon then you're kinda boned. Security through obscurity and all that.
- aequitas 9y agoPart of that reconnaissance is running vulnerability testing suites. I think that they will give a quicker answer to most of the questions than having to read through the configuration code and piecing it together. Often I myself even prefer running nmap instead of looking at the code to check some configuration.
- jasonlotito 9y agoHow does releasing this information change that in any way to benefit the attacker?
- detaro 9y agoSo in a scenario where you can breach their AWS accounts, it would be a noticeable difficulty for you to discover that they use this pattern to work? I'm not very familiar with AWS, but that seems odd.
- 0xfeba 9y agoSo you save the attacker a day by explicitly telling them what software stack you use. They still have to exploit that stack. It doesn't really change anything, just possibly saves the attacker some time if they can exploit the remaining layers.