The sys admin’s daily grind: WebCalendar
BANNING BRUTES
Users log on to services such as SSH, ftp, SASL, POP3, IMAP, Apache htaccess, and many more using their names and passwords. These popular access mechanisms are a potential target for brute-force attacks. An attentive bouncer will keep dictionary attacks at bay.
When users are allowed to choose passwords of their own volition, they often choose something fairly weak, like the name of a friend or pet. This predictable human behavior is something that the bad guys relish.
All an attacker needs to do is set up a loop of login attempts that references a dictionary list of passwords. After all, chances are very slight that the user has set up a password like 4G&dP9a! for the account under attack.
Read full article as PDF:
Charlys_Column.pdf (94.55 kB)Tag Cloud
News
-
New Mint Minted
Version 16 of the popular Linux desktop reveals new tools, edge-snapping, and performance improvements.
-
New Worm Attacks Linux Devices
Symantec says Linux-Darlioz burrows in through PHP.
-
Project Sputnik Gets a Boost
Dell renews its quest for the ultimate developer machine.
-
Sneaky New Linux Attack Discovered in the Wild
Innovative back door looks like normal SSH traffic.
-
CeBIT Call for Papers
One of CeBITs most successful forums opens the new year with a new name. The popular Open Source Forum continues in 2014 under the name Special Conference: Open Source. This year, the forum will be bigger and offer a wider range of possibilities for sponsors.
-
Linus Announces Linux Kernel 3.12
New release offers better graphics drivers and expands filesystem support.
-
Dark Alliance Reinvents Email Security
New mail protocol will shut out the NSA and prevent snooping on metadata.
-
DDos Attack Map Charts Denial of Service
A new web application helps users visualize distributed denial-of-service attacks.
-
Saucy Salamander Gets Legs
Ubuntu 13.10 takes a step toward convergence, with lots of mobility, but Mir only partly here.
-
Intel and Arduino Create Pi-Like System
Galileo board is targeted to embedded developers and educational institutions.