Name Game
Premium
join:2002-07-07
North Myrtle Beach, SC
| reply to sivran
Re: Is Portknocking "Real" Security?
said by sivran  :It's more like a prohibition-era speakeasy with a secret knock. Bang on the door like a policeman, and no one ever opens the little sliding window and asks for the password.  At the very worst, it's like having one extra password to enter. What could be so bad about that, aside from the annoyance factor? Of course, physical analogies are somewhat flawed anyway. A door can be knocked down. A closed port (usually) can't be. Might want to read Matt Doyle's undergrad thesis..
»portknocking.sourceforge.net/
--
Gladiator Security Forum »www.gladiator-antivirus.com/ Missing Kids »www.missingkids.com/ |
|
Daniel
Premium,MVM
join:2000-06-26
Pleasanton, CA
clubs: 
| reply to sivran
said by sivran :At the very worst, it's like having one extra password to enter. What could be so bad about that, aside from the annoyance factor? Actually, once you install the software it can become pretty much transparent, so the "knock" can take place without you being aware of it (and even use cryptography to do so).
The end result is that you just login as normal regardless of where you are, while the rest of the world sees nothing whatsover. To them there might as well not even be a service running.
--
dmiessler.com -- grep understanding knowledge |
|
sivran
Long Live The Suite
Premium
join:2003-09-15
Arlington, TX
clubs:
 ·RoadRunner Cable
| reply to Daniel
It's more like a prohibition-era speakeasy with a secret knock. Bang on the door like a policeman, and no one ever opens the little sliding window and asks for the password.
At the very worst, it's like having one extra password to enter. What could be so bad about that, aside from the annoyance factor?
Of course, physical analogies are somewhat flawed anyway. A door can be knocked down. A closed port (usually) can't be.
--
Think outside the fox...Seamonkey |
|
