Re: help me understand how a Mac is virtually immune to viruses?

Tom Rauschenbach wrote:
> A lot depends on the definition of "attack". Many serious attacks begin
> with a port scan to classify the target. A port scan is pretty harmless,
> and if the attack stops after deciding that the target has the wrong OS,
> one might not count it as an attack.

Yeah, I wouldn't call a port scan an attack. An attack would probably
be developed in lab first, anyway.

--
Brian Tung <brian@xxxxxxx>
The Astronomy Corner at http://astro.isi.edu/
Unofficial C5+ Home Page at http://astro.isi.edu/c5plus/
The PleiadAtlas Home Page at http://astro.isi.edu/pleiadatlas/
My Own Personal FAQ (SAA) at http://astro.isi.edu/reference/faq.html
.

Relevant Pages

  • Re: Just want to keep the crap out!!
    ... hardware NAT. ... My browser uses outgoing port 1045 to connect to yahoo:80. ... Someone would have to target that 1045 port while i'm using it. ... to slip into the open stream and execute some man-in-the middle attack ...
    (comp.security.firewalls)
  • RE: Strange loopback in firefox.
    ... described as heavy attack from outside IP addresses. ... either using the Microsoft_DS port or epmap port to connect). ... For example a connection from port 3014 to 3015 and the next ... to facilitate one-on-one interaction with one of our expert instructors. ...
    (Security-Basics)
  • FW: Legal? Road Runner proactive scanning.[Scanned]
    ... You consider a port scan to be an attack? ... to facilitate one-on-one interaction with one of our expert instructors. ... Attend a course taught by an expert instructor with years of in-the-field ...
    (Security-Basics)
  • Re: SSH server under attack...
    ... It's highly possible that even though you changed the port, an automated script discovered the new port by probing the ports and matching version numbers, ie: ... the new machine to attack me is 200.55.192.29. ... Failed password for invalid user admin from::ffff:200.55.192.29 port ...
    (Security-Basics)
  • SSH server under attack...
    ... OK...within a few hours the server was being attacked again on port 2222. ... The router/firewall logs dont show any dropped packets sent to port 22 so he changed the port of the attack script. ... I scanned the machine and found that it is hosting a webserver Server at www.springs.cl) among other services. ... Invalid user admin from::ffff:200.55.192.29 Failed password for invalid user admin from::ffff:200.55.192.29 port ...
    (Security-Basics)