News for hackers. Stuff that matters.

A comment on eBay is port scanning visitors to their website. Parent comment

Re:eBay is port scanning visitors to their website by narrowtux on Saturday June 06, 2020 @06:55AM (#23438294)
As a developer on a product that uses websocket extensively, I'm afraid that this will lead to the already huge distrust in the technology.

If IT admins get wind of this they'll just block it (or never unblock it since it's been blocked by some from day 1) and our product gets degraded experience.

[ Parent | on HN ]
Re:eBay is port scanning visitors to their website by dicknuckle on Saturday June 06, 2020 @08:16AM (#23438625)
like dropping ICMP replies on firewalls. idiotic because it gives a very false sense of security. it's been a useless "security" practice since the 90s.
[ Parent | on HN ]
Re:eBay is port scanning visitors to their website by rasz on Monday June 08, 2020 @07:18PM (#23461848)
Zonealarm's "!1ALERT!! x.x.x.x is h4x0r1ng you with ICMP packets!" sold $millions worth of placebo in early 2000.

http://download.zonelabs.com/bin/media/pdf/ZA_Manual.pdf

[ Parent | on HN ]
Re:eBay is port scanning visitors to their website by 1over137 on Saturday June 06, 2020 @11:32AM (#23439846)
But don't firewalls drop everything inbound by default? So it's more that people don't know they should create rules to allow ICMP, no?
[ Parent | on HN ]
Re:eBay is port scanning visitors to their website by concerned_user on Saturday June 06, 2020 @11:57AM (#23440036)
Connection comes from your browser i.e. localhost to yourself, firewall is not setup to block such connections in most cases.
[ Parent | on HN ]
Re:eBay is port scanning visitors to their website by narrowtux on Monday June 08, 2020 @09:14AM (#23456193)
Yes, false sense of security hits the nail on the head.

Fits right there with unnecessary password rules too.

[ Parent | on HN ]