Article View: comp.security.firewalls
Article #128Re: Cuervo, I disagree: ShareSniffer Released
From: Zadig
Date: Wed, 28 Feb 2001 02:18
Date: Wed, 28 Feb 2001 02:18
33 lines
3404 bytes
3404 bytes
In article <s5Qm6.4721$S25.67862@typhoon.sonic.net>, John Navas <spamfilter@navasgrp.dublin.ca.us> wrote: > The service may or may not respond that way -- that's an error > condition, so behavior is undefined. There is no legitimate purpose > that a FIN probe serves; better firewalls block them. (Mine both blocks > and logs them, alerting me to repeated probes within a given time > window.) [snip] > A FIN probe is almost certainly a part of an attempted attack. No, any port scan can be used for legitimate reasons (to probe my own or an authorized network for weaknesses) or for cracking purposes. Moral absolution only makes a person look close-minded. I mentioned a FIN scan because your contention that port scans should be illegal because they somehow connect to an open service doesn't apply to FIN scans -- don't make a connection, but detect an open port anyway. It's a ridiculous argument regardless... Port scanning does no harm, and should therefore not be illegal, any more than checking out the security at your bank does harm, nor is it illegal. You can enter the bank and ask the guard about their security, and even check out the security cameras and door sensors up close, and you can't be busted. Use the information you gather for malicious behavior, however, and you go to jail, as you should. Use the information to satisfy your own curiosity, or research, for example, and no harm is done. If you make laws against actions that do no harm simply because they may lead to harm, you undermine the law and change nothing of people's behavior. It's a waste of time and law enforcement resources.
Technical Details
Message-ID:
<zadig-D29876.21184927022001@news.dsli.com>Path:
arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!nntp.cs.ubc.ca!torn!howland.erols.net!newsfeed.skycache.com!Cidera!news-sjo.usenetserver.com!news-out.usenetserver.com!e3500-chi1.usenetserver.com.POSTED!zadigReferences:
<3A966412.9336DCD8@mynetwatchman.com> <qvig9tobv9597b8fmhp5bohg701i8ftbtk@4ax.com> <qO9m6.4024$S25.60081@typhoon.sonic.net> <t5nj9t4vvua0ovclofd9fcidjgfqmjnk2m@4ax.com> <97cngt$mop$2@news.panix.com> <mAmm6.4120$S25.62449@typhoon.sonic.net> <MPG.1503be36f44f72a3989701@news.earthlink.net> <hPum6.4139$S25.63391@typhoon.sonic.net> <zadig-71A47A.15341926022001@news.dsli.com> <s5Qm6.4721$S25.67862@typhoon.sonic.net>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,b3c453f70036b961 X-Google-Attributes: gidf922c,public X-Google-Thread: 10090f,b3c453f70036b961 X-Google-Attributes: gid10090f,public X-Google-Thread: f5dc1,b3c453f70036b961 X-Google-Attributes: gidf5dc1,public X-Google-Thread: 113850,b3c453f70036b961 X-Google-Attributes: gid113850,public X-Google-ArrivalTime: 2001-02-27 18:22:04 PST Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!nntp.cs.ubc.ca!torn!howland.erols.net!newsfeed.skycache.com!Cidera!news-sjo.usenetserver.com!news-out.usenetserver.com!e3500-chi1.usenetserver.com.POSTED!zadig From: Zadig <zadig@no.spam.thanks.aol.com> Newsgroups: comp.security.firewalls,bellsouth.net.security,comp.dcom.xdsl,comp.dcom.modems.cable Subject: Re: Cuervo, I disagree: ShareSniffer Released References: <3A966412.9336DCD8@mynetwatchman.com> <qvig9tobv9597b8fmhp5bohg701i8ftbtk@4ax.com> <qO9m6.4024$S25.60081@typhoon.sonic.net> <t5nj9t4vvua0ovclofd9fcidjgfqmjnk2m@4ax.com> <97cngt$mop$2@news.panix.com> <mAmm6.4120$S25.62449@typhoon.sonic.net> <MPG.1503be36f44f72a3989701@news.earthlink.net> <hPum6.4139$S25.63391@typhoon.sonic.net> <zadig-71A47A.15341926022001@news.dsli.com> <s5Qm6.4721$S25.67862@typhoon.sonic.net> User-Agent: MT-NewsWatcher/3.1 (PPC) Message-ID: <zadig-D29876.21184927022001@news.dsli.com> Lines: 33 X-Complaints-To: abuse@usenetserver.com X-Abuse-Info: Please be sure to forward a copy of ALL headers X-Abuse-Info: Otherwise we will be unable to process your complaint properly. NNTP-Posting-Date: Tue, 27 Feb 2001 21:17:14 EST Organization: WebUseNet Corp http://www.usenetserver.com - Home of the fastest NNTP servers on the Net. Date: Tue, 27 Feb 2001 21:18:49 -0500