Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 4 Sep 2004 13:50:28 -0400
From:      Wesley Shields <wxs@csh.rit.edu>
To:        vxp <vxp@digital-security.org>
Cc:        Colin Alston <karnaugh@karnaugh.za.net>
Subject:   Re: fooling nmap
Message-ID:  <20040904175028.GA25772@csh.rit.edu>
In-Reply-To: <20040904100640.E37469@digital-security.org>
References:  <20040904093042.B37306@digital-security.org> <20040904100640.E37469@digital-security.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Sep 04, 2004 at 10:07:36AM -0400, vxp wrote:

> no. obscurity as the _only_ "security" is no security.
> there's nothing wrong with ADDING obscurity, however. =)
> 
> --Val

That is true, but the problem with these kinds of things is that users
will think that with a simple flip of a sysctl they are secure, when in
fact that are no more secure than before.  If you are truely concerened
with security there are many better things you can do to tighten your
box down.

With that said, this would certainly be a fun exercise.

-- WXS



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040904175028.GA25772>