On Wed, Jan 7, 2009 at 9:58 PM, Leonid Evdokimov <[email protected]> wrote:
> Norman Rasmussen wrote:
>>
>> I (as a server admin) want to protect my server from attacks.
>
> Obfuscation != protection.
> Whole protection is as secure as weakest element of it, don't forget that.
>
> Yes, I know, hiding IP makes flood attack a bit more complicated, but you
> should never forget about social engineering:
>
> <malicious> Wow! I see, you use jabber. I would like to use it too, but all
> ICQ transports I used were unstable. What server do you use?
> <victim> icq.example.org
>
> malici...@botmaster$ sudo ping -f icq.example.org

Except that my scenario was the angry person trying to attack the
user.  This is attacking the server.  Maybe it will still work, but
it's far from being the same issue I raised.

I never said it would solve all cases, I just gave one case which it
*would* solve.

TX

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"py-transports" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/py-transports?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to