News for hackers. Stuff that matters.

A comment on Bastion hosts. Parent comment

Re:Bastion hosts by e40 on Monday November 24, 2014 @07:09PM (#8655534)
1. Anyone who can see your traffic can see where the service is.

Dude, right there you lost me. 99.99999999% of the internet can't see your traffic. The NSA can. Your ISP can. Random threats on the 'net at large cannot see your traffic.

[ Parent | on HN ]
Re:Bastion hosts by peterwwillis on Tuesday November 25, 2014 @12:13PM (#8658562)
You are radically misinformed. As a hacker, I have about a dozen ways to see your traffic. We don't encrypt credit card transactions because we're afraid the NSA or your ISP's network admins might pick up your card and buy some sneakers on Amazon.

Ways I can see your traffic:

  * fucking with bgp
  * fucking with routers in general
  * fucking with switch port tables
  * fucking with proxies
  * spoofing
  * sniffing wireless networks
  * sniffing wired networks
  * tapping a cage backbone
  * rooting an isp
  * rooting a dslam
  * rooting pops
  * rooting firewalls
  * rooting endpoints on management ports
  * abusing hosted networks
The single easiest way to view someone's traffic is to use the completely fucked-up retarded configuration of an intermediary router. Do you know how many routers sit between you and your destination? Do you know how many of those have 10-year-old configurations enabled via telnet on publically-routable interfaces with default snmp community strings and 6-character passwords?

Don't assume that just because you aren't aware of a particular attack that it doesn't exist or doesn't apply to you. Hackers are only limited by their creativity.

Please don't trust the network.

[ Parent | on HN ]