6 ms·
Wouldn't your stateful packet inspection firewall notice the remote attempts to reach the backdoor? Assuming its running openbsd and not also full of hardware b
by dobbsbob 13y ago
Wouldn't your stateful packet inspection firewall notice the remote attempts to reach the backdoor? Assuming its running openbsd and not also full of hardware backdoors.
This is one reason I never buy hardware p2p off bitcoin trading sites and forums, since it would seem logical to target those buyers who may have stuffed wallets to clean out
- bcoates 13y agoI'm sure the use of a funny protocol packet is just to keep the example simple, making an evil module that opens a tunnel that a DPI firewall wouldn't notice is routine gruntwork to the kind of attacker that can manage to sneak an evil PCI device onto your bus.
- superuser2 13y agoIt wouldn't be that hard to have the backdoor reach out to a remote host instead. Once you have any amount of control at the internal level, firewalls filtering inbound packets are basically worthless.