[ILUG] hack attempt - thoughts

[Paul Jakma]

On Mon, 6 Mar 2000, Smelly Pooh wrote:

> pointer and exec /bin/sh.  That means that a hacker could have an intel
> exploit for a program, and if he needs to use it on a sparc he'll grab the
> equivalent assembly code for sparc (either by downloading it which you can or
> writing it himself which would take more skill),

but the point is that most of these crackers are just script kiddies. ie
they depend on the download option and without it they are lost. So cut
that option off by running linux/sparc, linux/alpha, linux/mips (in
order of obscurity, from least to most)[1], and you've cut off 99.99% of
the "hacker" population. 


> likely, I've seen many script kiddiez d/load, compile an exploit, runs it and
> if it doesn't work just throw it away, takes a rarer breed to go through the
> bother of fixing an exploit :}
> 

exactly,  and the chances that it's one of the "rarer" breed knocking on
your server are slim, and if they are, then chances are nothings going
to stop them anyway. But at least you can cut off the oxygen of those
script kiddies...

-paul.