4 ms·
Security through obscurity.
by hackerboos 14y ago
Security through obscurity.
- zwily 14y agoObscurity is fine as a layer in your security strategy.
- throwaway125 14y agoWith Moxie Marlinspike's KnockKnock[1] port knocking offers real additional security. 1) http://www.thoughtcrime.org/software/knockknock/ http://www.thoughtcrime.org/software/knockknock/
- biot 14y agoYes, much like choosing an obscure sequence of bits to function as one half of a public/private keypair during an SSH protocol handshake.
- hackerboos 14y agoNot quite.
- Sami_Lehtinen 14y agoPort Knocking packets can have strong crypto payload. So yes, it's not really any different than using VPN. (Yes it is technically yes, but it allows you to open access from one IP address, using strong authentication for service, which still got strong authenticaiton. TOTP, private key and password.) It's just front blocking access to that tcp port without the right opening packet.