News for hackers. Stuff that matters.

A comment on API providing threat analysis of any given IP address. Parent comment

Re:API providing threat analysis of any given IP address by dylz on Saturday August 06, 2016 @03:40PM (#12239556)
If it's default ports, you can just probe on login and deny it. We do this for a game I've admined for, and it's in the terms of service. Common L2TP, PPTP, etc.
[ Parent | on HN ]
Re:API providing threat analysis of any given IP address by cmdrfred on Saturday August 06, 2016 @04:34PM (#12239777)
Interesting. So if I put a terms of service discussing it on my blog can I nmap all my visitors?
[ Parent | on HN ]
Re:API providing threat analysis of any given IP address by swhipple on Saturday August 06, 2016 @07:40PM (#12240394)
Scanning the defaults for open proxies with a note in the ToS is not super uncommon with some types of services. I don't recommend sweeping random visitors to your website.
[ Parent | on HN ]
Re:API providing threat analysis of any given IP address by sah2ed on Saturday August 06, 2016 @05:37PM (#12240041)
Since the OP said:

> I help develop a fairly popular webgame.

... unless the web-based game relies on a plugin that can skirt the browser's sandbox, there's no way to probe for active ports.

[ Parent | on HN ]
Re:API providing threat analysis of any given IP address by wbl on Saturday August 06, 2016 @06:01PM (#12240102)
You can ask the server to do it for you.
[ Parent | on HN ]