3 ms·
To be clear, it doesn't work today because OS's reacted to neutralize the possibility. At this point there is so much "Internet Background Radiation" of consta
by mandevil 3y ago
To be clear, it doesn't work today because OS's reacted to neutralize the possibility.
At this point there is so much "Internet Background Radiation" of constant port scanning and everyone has just accepted that you are being constantly scanned by, say, Shodan and it's ilk that this threat doesn't seem super-alarming. Back in the 1990's- when SSL wasn't everywhere, and telnet was still a thing- someone who could silently find your attempt at security-through-obscurity 'I moved telnet to port 2525" nonsense that was still done pretty regularly in 1998- was a big deal.
- antirez 3y agoThe problem with idle scan isn't much scanning itself, but understanding trust relationships between hosts. This allowed to target the attacks much better. But I get what you mean in general.
- xyzzy123 3y agoI haven't looked for a few years but last time I checked there were still a bunch of crappy ip stacks out there (eg particular cable modem brands) with sequential ip ids.