Comments on: Guide to port knocking http://nodebox.metaforix.net/tech/84/guide-to-port-knocking >>insert something randomly funny here Thu, 02 Jun 2011 20:26:03 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: nodebox http://nodebox.metaforix.net/tech/84/guide-to-port-knocking/comment-page-1#comment-5516 nodebox Mon, 14 Jan 2008 08:03:55 +0000 http://nodebox.metaforix.net/tech/84/guide-to-port-knocking#comment-5516 I do acknowledge that there is beauty (and simplicity) in security. But I really do believe in this as an obfuscation measure because there are no open ports by default. Of course, this is a greatly simplified of many port knocking mechanisms present today. This is an unencrypted form of communication and is therefore susceptible to packet sniffing. However, the more sophisticated forms of port knocking use long strings as a pseudo-authentication mechanism, which I do believe is more secure and can help to reduce the risk of exposure further. I do acknowledge that there is beauty (and simplicity) in security. But I really do believe in this as an obfuscation measure because there are no open ports by default.

Of course, this is a greatly simplified of many port knocking mechanisms present today. This is an unencrypted form of communication and is therefore susceptible to packet sniffing.

However, the more sophisticated forms of port knocking use long strings as a pseudo-authentication mechanism, which I do believe is more secure and can help to reduce the risk of exposure further.

]]> By: frankchn http://nodebox.metaforix.net/tech/84/guide-to-port-knocking/comment-page-1#comment-5515 frankchn Mon, 14 Jan 2008 06:59:03 +0000 http://nodebox.metaforix.net/tech/84/guide-to-port-knocking#comment-5515 I am also of the opinion that the less code that runs on a server the better (since there are less surfaces for attack), so I am quite dubious about this whole knockd thing. I am also of the opinion that the less code that runs on a server the better (since there are less surfaces for attack), so I am quite dubious about this whole knockd thing.

]]>