Quotes of the week
[FBI agent Maria] Ricci said the steganographic program was activated by
pressing control-alt-E and then typing in a 27-character password, which
the FBI found written down on a piece of paper during one of its searches.
-- CNET on
the perils of long passwords (by way of Bruce Schneier)
Out of all
the devices, operating systems, ports, and protocols out there, only
one is so fragile and insecure that we had to exclude it from Nmap
version detection by default. That is HP JetDirect (TCP ports
9100-9107). No matter what random crap you spew at the port, it will
generally either crash the machine or start spewing out paper. When
Nmap version detection was first released 7 years ago, we had so much
immediate feedback about HP printer problems that we "temporarily"
blocked those ports by default to give HP a chance to fix the
problems. We're still waiting for that to happen! The HP printer I
bought this year still goes haywire and starts beeping and spewing
paper if I enable the HP JD ports by scanning it with
"nmap -A --allports hostname".
-- Nmap author Fyodor
