Subj : Re: Nightmares / Dreams
To   : boraxman
From : Andre
Date : Fri Apr 01 2022 07:15:56

 St>> I think at this point, there is little worth trying to lift out of
 St>> any given telnet session that it probably has some level of security
 St>> through obscurity.

I can't quite figure out what this means, so I may be entirely missing the point. "Security through obscurity" means that you are hoping people can't figure out how the internals of something work. It doesn't mean that it's unimportant or barely used BBS traffic.

 bo> I don't agree. People just try to search for open ports, just to see what
 bo> they can get. People aren't looking for something specific, they are just
 bo> looking to see what is available. Any telnet session is a target. 

The only way to make this statement more untrue would be to say that scanning isn't even happening. :)

The vast majority of scanning looks for, and usually attempts to exploit, a specific attack. Just eyeballing my IPS shows maybe 5% or so are simple port scans. It's been this way at least since I started paying attention in the early 2000s.


- Andre
--- SBBSecho 3.15-Linux
 * Origin: Radio Mentor BBS - bbs.radiomentor.org (21:3/117)

.