News for hackers. Stuff that matters.

A comment on Port knocking. Parent comment

Re:Port knocking by rmrfstar on Thursday May 14, 2020 @11:30PM (#23188549)
Moxie actually published a nice lighweight port knocking daemon that:

* Does not bind to sockets

* Is not written in C

* Prevents replay attacks

* The only code that runs as root is just tailing kern.log and is like 15 lines

It probably needs to roll from SHA1 to SHA256 and Python2 to Python3, but otherwise seems sound.

[1] https://moxie.org/software/knockknock/

[ Parent | on HN ]
Re:Port knocking by Forbo on Friday May 15, 2020 @02:15PM (#23195436)
Looks like there is a pull request to change it from authenticate-then-encrypt to encrypt-then-authenticate that hasn't been merged for over five years. Thinking this project might be abandoned, unfortunately. :-(

Edit: It appears there may be an active fork here: https://github.com/indyprime/knockknock

Still digging through to see if the encrypt-then-authenticate change made it into this version.

Edit 2: It looks like it still uses authenticate-then-encrypt. I sent an email to the maintainer of that fork, we'll see what happens. ^__^

[ Parent | on HN ]
Re:Port knocking by demosito666 on Friday May 15, 2020 @06:00PM (#23198009)
This is freaking genius!
[ Parent | on HN ]