3 ms·
>they do not find "insecure" servers to break into. They simply brute-force and exploit known bugs on popular services. What exactly is the difference?
by thfuran 3y ago
>they do not find "insecure" servers to break into. They simply brute-force and exploit known bugs on popular services.
What exactly is the difference?
- sph 3y agoFinding insecure servers, what human hackers would do, requires persistence, time and a working brain. Bots, instead, throw shit at a wall and see what sticks. Move your SSH server with credentials root:root on port 1234 and notice how many bots get utterly defeated (only for sake of argument, because OpenSSH has a banner which makes it easy to identify wherever it's running)
- thfuran 3y ago>Bots, instead, throw shit at a wall and see what sticks And once it sticks, an insecure server has been found. A bot is just a tool someone is using.