4 ms·
Finally, a place that can gather IP addresses and associate them to specific security products to have them hacked later. Just what I've been waiting for.
by not_a_cop75 7y ago
Finally, a place that can gather IP addresses and associate them to specific security products to have them hacked later. Just what I've been waiting for.
- louisstow 7y agoWe don't store anyones IP address and the results are only in memory cached.
- not_a_cop75 7y agoIt's not you, but the implicit idea of trust. How are three people I know nothing about going to give me better results than a known name? Best of luck establishing yourselves though.
- lone_haxx0r 7y agoDon't shoot the messenger.
- not_a_cop75 7y agoOr...interrogate the messenger when he tells you something that not even he is supposed to know.
- jdnenej 7y agoWhy do you think this is any easier than just scraping urls off the internet
- Quekid5 7y agoI'm always surprised by the mindset of the person you're replying to. I learned a few years ago from some DEFCON video[0] that someone had figured out a way to do a (basic) port scan of the whole internet in ~1 day (or something like that). Thing is... it really shouldn't have been that surprising. Although network latency isn't getting that much better year by year (c = c), the amount of data you can process in bulk, correlate, etc. is ever-increasing. [0] At least, I think that was the conference.
- nighthawk454 7y agoIn fact, there's a tool that claims to scan the internet in 6 minutes: https://github.com/robertdavidgraham/masscan https://github.com/robertdavidgraham/masscan
- Quekid5 7y agoYes, thank you, I think that was the one. Only missed by an order of magnitude or so.
- not_a_cop75 7y agoTo be fair anything that is sending like this is probably getting you network blocks: "This program spews out packets very fast. On Windows, or from VMs, it can do 300,000 packets/second. On Linux (no virtualization) it'll do 1.6 million packets-per-second. That's fast enough to melt most networks."
- kayfox 7y agoThat's probably the DEFCON talk the parent poster is talking about: Massscanning the Internet - Defcon 22 (2014) https://www.youtube.com/watch?v=UOWexFaRylM https://www.youtube.com/watch?v=UOWexFaRylM
- not_a_cop75 7y agoPort scanning is a real and established thing that anyone who is even thinking of security has known about normally for decades, but port scans don't tell everyone what your whole stack consists of. Maybe you'd like to share why sharing your stack with everyone is a good idea? I'd really like to know. Thank you.
- Quekid5 7y agoDo you think that fingerprinting is quantitatively different from port scanning? My main point was just that a port scan can immediately identify the 0.1% (or whatever) of the Internet that you're interested in and then try more "invasive" probing. (I should add that I forgot to mention that IpV6 does make the whole "PortScan the Internet" business a tad more complicated, so that's than argument against me.)
- saagarjha 7y agoAlternatively, secure your stack and don’t have it hacked later.
- jamessteel 7y agoThose self-managing their machines and sites could doubt if a break change or update would cause downtime, LXD/Docker could simplify on that and reduce the risk to only containers.
- not_a_cop75 7y agoPart of securing your stack is not sharing with everyone exactly what you have, or do you not study security at all?
- yjftsjthsd-h 7y agoWait until you hear about shodan...
- not_a_cop75 7y agoI've used Shodan. But seriously, please give me a list of real resources if you think you're up to the task.