[183775] in North American Network Operators' Group
Re: Synful Knock questions...
daemon@ATHENA.MIT.EDU (Roland Dobbins)
Wed Sep 16 02:29:44 2015
X-Original-To: nanog@nanog.org
From: "Roland Dobbins" <rdobbins@arbor.net>
To: nanog@nanog.org
Date: Wed, 16 Sep 2015 13:27:34 +0700
In-Reply-To: <55F8F567.2000309@mykolab.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On 16 Sep 2015, at 11:51, Paul Ferguson wrote:
> Please bear in mind hat the attacker *must* acquire credentials to
> access the box before exploitation.
And must have access to the box in order to utilize said credentials -
which of course, there are BCPs intended to prevent same.
-----------------------------------
Roland Dobbins <rdobbins@arbor.net>