For most of us, the threat is the exact opposite of a dedicated attacker. It's an opportunist (or automated system) that doesn't need to compromise every system on the Internet. It just needs to compromise enough. You can compromise enough for almost any purpose without getting into getting past port knocking schemes.
Re:Obscurity Is a Valid Security Layer
by justinsaccount on Tuesday June 07, 2016 @03:17PM
(#11856992)
> A dedicated attacker can wait and discern your knock pattern and if you have an unpatched server, attack it.
Really? How are they going to do this?
Re:Obscurity Is a Valid Security Layer
by michaelrash on Wednesday June 08, 2016 @08:52AM
(#11861877)
An adversary who can watch port knocking sequences is one reason why SPA was developed:
http://www.cipherdyne.org/fwknop/docs/fwknop-tutorial.html#w...
In fact, it can give you a false sense of security from such 0-day exploits.