Re:Show HN: Knockles – eBPF Port Knocking Tool
by knorker on Monday August 29, 2022 @03:09PM
(#32642205)
Port knocking is just a channel to send a password. Usually a static plaintext password.
It's overengineering to the nth degree.
If you want to send a password without any TCP baggage then just send a UDP packet. It's not as "cool", perhaps, but it'll be orders of magnitude easier to make secure.
Or use TCP MD5, and even a sniffer can't RST your TCP session.
It's overengineering to the nth degree.
If you want to send a password without any TCP baggage then just send a UDP packet. It's not as "cool", perhaps, but it'll be orders of magnitude easier to make secure.
Or use TCP MD5, and even a sniffer can't RST your TCP session.