🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.firewalls
Article #166

Re: Cuervo, I disagree: ShareSniffer Released

#166
From: Paul Newhouse
Date: Mon, 26 Feb 2001 02:53
53 lines
3911 bytes
In article <7vgm6.4056$S25.61151@typhoon.sonic.net>,
	John Navas <spamfilter@navasgrp.dublin.ca.us> writes:
> [POSTED TO comp.dcom.modems.cable; PLEASE REPLY THERE]
> 
> In <97be0p$buu$3@news.panix.com>, snorwood@redballoon.net (Scott
> Norwood) wrote:
> 
>>In article <8T9m6.4026$S25.60081@typhoon.sonic.net>,
>>John Navas  <spamfilter@navasgrp.dublin.ca.us> wrote:
>>>
>>>In <YSXl6.1657$Tj1.1236856@nntp1.onemain.com>, "mirayge"
>>><mi_rayge@notyahoo.com> wrote:
>>>
>>>>Yes there are. Many people run FTP services on their machines and allow
>>>>anonymous logins. They want to share programs and files. How do you find
>>>>these servers? By scanning a range of IP numbers for open port 21.
>>>
>>>No you don't (assuming you have legitimate motives).  You look for
>>>published invitations.  There are well-established mechanisms for this.
>>
>>Would a DNS entry for a host named "ftp" be sufficient to assume that
>>a particular machine is running an ftp daemon and exists (at least in
>>part) for the purpose of making various files available to the public?
>>Or do you believe that the invitation would have to be more explicit
>>than that (such as a Usenet post that states "check out my cool FTP
>>archive" or something like that)?
>>
>>I'm genuinely interested in what you believe would be an appropriate
>>invitation.
> 
> In my book invitation means an explicit invitation, not something
> implicit or assumed.  Just because a host is named "FTP" doesn't
> necessarily mean that it's a *public* FTP server.

I agree, but trying a host with a name "ftp. ..." to see if it's an
anonymous server is a lot more reasonable than port scanning.

I'm still wondering what these people think they'll find at some arbitrary
ftp server ... anonymous or not?  If they are a die hard, myopic M$ weenie 
what would they expect to find at, let's say, "ftp.<pick a *ix>.org"?  
And these are widely publicized.  Desiring to find anonyomous ftp servers 
because they are there makes no sense.  It's not as if an anonymous ftp
site will have some required magic files available.
 
Paul

> Addresses of public FTP servers can be published by email, web pages,
> and in directories, just to name a few of the ways.
> 

-- 
The lotto must be rigged, I should have won by now.
Modular furniture is cruel and unusual.
Technical Details
Message-ID: <bzjm6.27379$5M5.1720067@news1.frmt1.sfba.home.com>
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!news-feed.riddles.org.uk!newsfeed.direct.ca!look.ca!newshub2.rdc1.sfba.home.com!news.home.com!news1.frmt1.sfba.home.com.POSTED!not-for-mail
References: <3A966412.9336DCD8@mynetwatchman.com> <AvBl6.3902$S25.55097@typhoon.sonic.net> <YSXl6.1657$Tj1.1236856@nntp1.onemain.com> <8T9m6.4026$S25.60081@typhoon.sonic.net> <97be0p$buu$3@news.panix.com> <7vgm6.4056$S25.61151@typhoon.sonic.net>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,b3c453f70036b961
X-Google-Attributes: gidf922c,public
X-Google-Thread: 10090f,b3c453f70036b961
X-Google-Attributes: gid10090f,public
X-Google-Thread: f5dc1,b3c453f70036b961
X-Google-Attributes: gidf5dc1,public
X-Google-Thread: 113850,b3c453f70036b961
X-Google-Attributes: gid113850,public
X-Google-ArrivalTime: 2001-02-25 18:58:03 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!news-feed.riddles.org.uk!newsfeed.direct.ca!look.ca!newshub2.rdc1.sfba.home.com!news.home.com!news1.frmt1.sfba.home.com.POSTED!not-for-mail
MIME-Version: 1.0
Sender: newhouse@bigbox.wan.vpn
X-Newsreader: knews 1.0b.1
Organization: Rockhead Enterprises
References: <3A966412.9336DCD8@mynetwatchman.com>
    <AvBl6.3902$S25.55097@typhoon.sonic.net>
    <YSXl6.1657$Tj1.1236856@nntp1.onemain.com>
    <8T9m6.4026$S25.60081@typhoon.sonic.net> <97be0p$buu$3@news.panix.com>
    <7vgm6.4056$S25.61151@typhoon.sonic.net>
From: rockhead.com@bigbox.wan.vpn (Paul Newhouse)
Subject: Re: Cuervo, I disagree: ShareSniffer Released
Newsgroups: comp.security.firewalls,bellsouth.net.security,comp.dcom.xdsl,comp.dcom.modems.cable
Content-Type: text/plain; charset=us-ascii
Lines: 53
Message-ID: <bzjm6.27379$5M5.1720067@news1.frmt1.sfba.home.com>
Date: Mon, 26 Feb 2001 02:53:59 GMT
NNTP-Posting-Host: 24.15.220.14
X-Complaints-To: abuse@home.net
X-Trace: news1.frmt1.sfba.home.com 983156039 24.15.220.14 (Sun, 25 Feb 2001 18:53:59 PST)
NNTP-Posting-Date: Sun, 25 Feb 2001 18:53:59 PST