Micheal Espinola Jr wrote:
> 
> Only if they brute-force is fast succession - which is insanely dumb to 
> do. And this is were automation can be brilliant.  There are lots of IP 
> addresses to scan.  There is no need to make all your efforts against a 
> single IP at a time.  If you revolve them, you become a lot less 
> noticeable attacker.
>

Are there people out there really pinging mail servers once every - say 
- 6 hours with made up user names to see if they exist ?  How many 
thousands will they have to try to get anything worthwhile out of it and 
how long - with such large gaps between pings to avoid blacklisting - 
would this take ?

It's fruitless and I'd be surprised if anyone could be bothered - there 
are far easier ways to harvest email addresses.



-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to