Re: fingerprinting BIND 9.1.0

2001-02-02 Thread Cy Schubert - ITSD Open Systems Group
In message [EMAIL PROTECTED], Hendy * writes: On Wed, Jan 31, 2001 at 02:13:07PM -0500, Lucas Holt wrote: Hiding a version number does not someone who knows what they are doing, but it does stop script kiddies out there. If a 14 year old kid can not figure ou t what they are dealing

Re: fingerprinting BIND 9.1.0

2001-02-01 Thread Lucas Holt
Hiding a version number does not someone who knows what they are doing, but it does stop script kiddies out there. If a 14 year old kid can not figure out what they are dealing with, they will move on to easier targets. "William D. Colburn (aka Schlake)" wrote: The FAQ file that comes with

Re: fingerprinting BIND 9.1.0

2001-02-01 Thread Hendy *
On Wed, Jan 31, 2001 at 02:13:07PM -0500, Lucas Holt wrote: Hiding a version number does not someone who knows what they are doing, but it does stop script kiddies out there. If a 14 year old kid can not figure out what they are dealing with, they will move on to easier targets. agreed, but

Re: fingerprinting BIND 9.1.0

2001-02-01 Thread Russell Fulton
On Wed, 31 Jan 2001 08:15:01 -0700 "William D. Colburn (aka Schlake)" [EMAIL PROTECTED] wrote: The FAQ file that comes with the distribution already covers all this. While it used to seem like a good idea to obfuscate version numbers, things like nmap can be written for just about any

Re: fingerprinting BIND 9.1.0

2001-01-31 Thread William D. Colburn (aka Schlake)
M -0600, [EMAIL PROTECTED] wrote: Date: Tue, 30 Jan 2001 19:14:20 -0600 From: [EMAIL PROTECTED] Subject: Re: fingerprinting BIND 9.1.0 To: [EMAIL PROTECTED] In message [EMAIL PROTECTED] Max Vision writes: The BIND 9.1.0beta releases and now BIND 9.1.0 include another hard c

fingerprinting BIND 9.1.0

2001-01-30 Thread Max Vision
Hi, The BIND 9.1.0beta releases and now BIND 9.1.0 include another hard coded chaos record called "authors". So now even if an admin changes or suppresses their version reply string, a remote user can still determine whether the server is running BIND 9.x. With the recent discovery of the tsig