News for hackers. Stuff that matters.

A comment on Knockknock: Simple, secure, and stealthy port knocking implementation. Parent comment

Re:Knockknock: Simple, secure, and stealthy port knocking im... by orev on Tuesday August 27, 2024 @11:47PM (#41375744)
Security is built in layers. Is it theoretically possible for someone on the network to observe the knock sequence? Yes. Is it likely to happen in any but the most adversarial of conditions? No. And if it’s implemented in a cryptographically secure way, like fwknop, then it’s really very good.
[ Parent | on HN ]
Re:Knockknock: Simple, secure, and stealthy port knocking im... by tptacek on Wednesday August 28, 2024 @12:13AM (#41375894)
One of the oldest canards in security: "defense in depth", "security is built in layers", which you can use to justify any performative measure.
[ Parent | on HN ]
Re:Knockknock: Simple, secure, and stealthy port knocking im... by orev on Wednesday August 28, 2024 @11:59AM (#41380956)
Can you expand on why you think it’s performative?
[ Parent | on HN ]
Re:Knockknock: Simple, secure, and stealthy port knocking im... by tptacek on Wednesday August 28, 2024 @03:03PM (#41383006)
Why what's performative? Fail2ban? Because using passwords with SSH is malpractice, and if you aren't, fail2ban literally doesn't do anything.
[ Parent | on HN ]