full-disclosure - Calcuating Loss

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: j.riden at massey.ac.nz (James Riden)
Subject: Calcuating Loss

"Schmidt, Michael R." <Michael.Schmidt@...obile.com> writes:

> Well one of the biggest issues that allows people to remain
> anonymous is DHCP.  If everyone on the internet was required to get
> a static IP address, or to log which IP they were using - using a
> secure technology then everyone could be tracked, sure a few "super"
> hackers could still manage to escape detection I am sure, but there
> is nothing that is the equivalent of a drivers license on the
> internet.

No. First thing to do is find an easily compromised box - still pretty
unlikely to be a honeypot even these days - and get on there. Once
you've installed a backdoor, secured the box and wiped the logfiles,
it gets much harder to trace back. Especially if that's done two or
three times.

Only the very stupid launch serious attacks from their own machine.

-- 
James Riden / j.riden@...sey.ac.nz / Systems Security Engineer
Information Technology Services, Massey University, NZ.
GPG public key available at: http://www.massey.ac.nz/~jriden/