News for hackers. Stuff that matters.

A comment on Obscurity Is a Valid Security Layer. Parent comment

Re:Obscurity Is a Valid Security Layer by tptacek on Tuesday June 07, 2016 @03:38PM (#11857152)
You have to worry about that anyways! ZERO is the number of attackers with reliable pre-auth sshd zero-day who can't hijack a TCP connection.

The threat model here simply does not make sense.

[ Parent | on HN ]
Re:Obscurity Is a Valid Security Layer by justinsaccount on Tuesday June 07, 2016 @03:54PM (#11857278)
Honestly, I don't worry about that at all.

I had a machine compromised in 2001 by script kiddies and worms scanning the internet on port 22 and compromising any host they could find with CVE-2001-0144. Not by attackers hijacking TCP connections.

In 2016 I am worried about a 0day being released and scripts kiddies or a worm compromising every host they can find running sshd. This effectively happened to debian systems in 2008. I don't know how you can say that it doesn't make sense when it happened.

[ Parent | on HN ]
Re:Obscurity Is a Valid Security Layer by tptacek on Tuesday June 07, 2016 @05:23PM (#11857985)
I just don't understand the threat model that gives attackers the most valuable RCE vulnerability in a decade, but denies them an ability attackers have had since 1996.
[ Parent | on HN ]