>
> thank you all for the clarification..I was indeed under the impression
> that used indiscreetly was somehow a ..no-no..
One of the first things that security experts do, is to scan a machine
for port services. And one of the first bits of advice, is to turn off all
unneeded services. Setting up an automatic scan and compare would seem
like a good step.
It would thus seem to be a good thing to have some of these tools in
our tooolkits.
> maybe this is the old adage ..."that a little bit of knowledge is
> dangerous"
Depends on the individual. Some people think that little bit is
everything, others see it as part of a larger pattern they have not yet
grasped, and thus treat it with caution.
> > under no circumstances should you sniff the ports of a system without first
> > asking permission from the person who runs that system. at the absolute
> > best, such an action would be a breach of 'nettiquette. at worst, someone
> > could file a complaint against you, and you could spend a lot of time
> > trying to convince people you were clueless, not malicious. neither
How can we detect such attacks? I get messages from time to time
about IPX requests from the internet, as well as certain cgi-bin web
requets that were unsavory. My systems have apparently been trashed twice
over the past couple of years, once resulting in disciplinary actions by a
university against some of their students. (The administration stated it
was againt their policy to say what the disciplinary actions were...) I
would like a more comprehensive way of monitoring security.
[EMAIL PROTECTED] ------------------ [EMAIL PROTECTED]
----------------------- IMAGINEERING --------------------------
----------------- Every mouse click, a Vote -------------------
---------- Do they vote For, or Against your pages? -----------
----- What people want: http://www.mall-net.com/se_report/ ----
---------------------------------------------------------------
____________________________________________________________________
--------------------------------------------------------------------
Join The Web Consultants Association : Register on our web site Now
Web Consultants Web Site : http://just4u.com/webconsultants
If you lose the instructions All subscription/unsubscribing can be done
directly from our website for all our lists.
---------------------------------------------------------------------
