[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: idea for improving security





Mark Edgington wrote:
Hi,

[..]

Guess it's not a very good idea. An attacker could find out your sequence, by listening your trafic. So you there is no additional security by your trigger.

There is a very simple Denial-Of-Service Attack to such a system, for someone who can listen to your traffic. Just send a paket to one of the ports in the sequence, when some one starts sending his. That would make your login attempt invalid every time.

Sebastian



Reply to: