Knockknock: Simple, secure, and stealthy port knocking implementation

Re:Knockknock: Simple, secure, and stealthy port knocking im... by TZubiri on Tuesday August 27, 2024 @10:05PM (#41375295)

Port knocking is supposed to be a last, self made, no dependency, cheap, cute layer of defense.

Installing external dependencies, even from someone trusted like Moxie, is counterproductive. The more system you have the more vulnerabilities, less is more.

I've actually been fired over this, we were building a product, and I implemented port knocking in python. Lead said it was unsecure and wanted to install an encrypted port knocking protocol.

EDIT: Just read the readme, Moxie is saying the same thing verbatim lol, we cool

[ Parent | on HN ]

Re:Knockknock: Simple, secure, and stealthy port knocking im... by teruakohatu on Tuesday August 27, 2024 @10:19PM (#41375375)

> I've actually been fired over this,

Why exactly where you fired? Because you used python?

[ Parent | on HN ]

Re:Knockknock: Simple, secure, and stealthy port knocking im... by TZubiri on Tuesday August 27, 2024 @10:28PM (#41375408)

Didn't follow instructions to the T. E.g: install a port knocker vs implementing a port knocker in python

[ Parent | on HN ]