4 ms·
This name is scary. How does it work? I hope FF makes a local, secure, offline SE.
by koolala 2y ago
This name is scary. How does it work? I hope FF makes a local, secure, offline SE.
- chrisandchris 2y agoShodan does exist for quite some time already. It's basically port-scanning the internet all the time.
- threecheese 2y agoWhen it first came out - and i’d say much less restricted for community use - it was a step change in my understanding of the extent of observability in place on the internet. I knew the NSA “was out there”, but never knew one could browse, StumbleUpon-style, random internet services and knock on their doors. At the time I dealt with a lot of smaller internet-facing applications, and was excited about being able to search for public instances of them and worried about others finding mine.
- koolala 2y agoEvery message on Discord... dear... ai...
- quenix 2y agoWhat name? "Shodan"? Why is it scary?
- Sajarin 2y agoShodan is the villain from System Shock: https://shodan.fandom.com/wiki/SHODAN https://shodan.fandom.com/wiki/SHODAN > SHODAN watches from Security Cameras, stares out of screens and monitors, sends threats and snide messages over the Station's PA system or via email to the player's data reader, and sometimes cuts off communications from friendly sources.
- koolala 2y agoHi i am friendly
- pxeger1 2y ago"Search Engine for the Internet of Everything"
- enahs-sf 2y agoShodan is first degree in Japanese martial arts or the go board game. Other stuff too like tea ceremony or calligraphy.
- iamaredpanda 2y agoBanner grabs, port knocking, ssl fingerprinting, application fingerprinting etc.
- jacekm 2y agoThere is a finite number of IPv4 addresses, you can simply open TCP connection to each of them on multiple ports and index everything that is returned. There are tools to do this by yourself (the only challenge is to find a provider that won't ban you for scanning the entire internet). There are also other services that do the same thing (e.g. ZoomEye, Censys, FOFA) For IPv6 there are too many addresses to scan them all so obtaining an IP to scan is a slightly different story (e.g. https://arstechnica.com/information-technology/2016/02/using-ipv6-with-linux-youve-likely-been-visited-by-shodan-and-other-scanners/ https://arstechnica.com/information-technology/2016/02/using...) but once you get the address the scanning process looks the same.