Timeline for Does it improve security to use obscure port numbers?
Current License: CC BY-SA 4.0
13 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 24, 2018 at 4:59 | comment | added | forest | @Ángel While that is correct, it would still provide capabilities to someone with an arbitrary read vulnerability or a side-channel attack that allows accessing the host keys (which is not an insignificant risk). Furthermore, it makes social engineering attacks easier and makes it possible to exploit the client. You are right about using iptables to redirect ports though, which would be a good idea if you want to use a high port safely. | |
| S Jul 23, 2018 at 16:33 | history | suggested | Robbie JW | CC BY-SA 4.0 |
Improve formatting, grammar
|
| Jul 23, 2018 at 15:39 | review | Suggested edits | |||
| S Jul 23, 2018 at 16:33 | |||||
| Jul 21, 2018 at 21:56 | comment | added | Ángel | Nope. Anyone attempting to log in to that evil server would be met with a big warning saying that the host key changed (granted the clients could take a step back, edit their known_hosts files to remove such entry, connect again, accept the unknown key and land into a different server owned by an attacker, where even the files they had on their home are missing). Also note, the redirection could be done via iptables, so sshd is actually listening on 22 (unreachable from the outside), and the real port 20,000 is shadowed by it). | |
| S Jul 20, 2018 at 10:32 | history | mod moved comments to chat | |||
| S Jul 20, 2018 at 10:32 | comment | added | Rory Alsop♦ | Comments are not for extended discussion; this conversation has been moved to chat. | |
| S Jul 18, 2018 at 20:14 | history | rollback | Steve Sether |
Rollback to Revision 3 - Edit approval overridden by post owner or moderator
|
|
| Jul 18, 2018 at 19:54 | history | suggested | Greg Bacon | CC BY-SA 4.0 |
Replace bare URL at the bottom with a hyperlink to the Tatu Ylonen reference. Quote the relevant passage.
|
| Jul 18, 2018 at 19:21 | review | Suggested edits | |||
| S Jul 18, 2018 at 20:14 | |||||
| Jul 17, 2018 at 18:27 | history | edited | Steve Sether | CC BY-SA 4.0 |
deleted 8 characters in body
|
| Jul 17, 2018 at 14:34 | history | edited | Steve Sether | CC BY-SA 4.0 |
added 105 characters in body
|
| Jul 17, 2018 at 5:45 | vote | accept | William Rosenbloom | ||
| Jul 17, 2018 at 5:37 | history | answered | Steve Sether | CC BY-SA 4.0 |