Re: What's the Big Deal in Solaris Version Being Identified?

From: Anthony Mandic (oe_at_hotmail.com)
Date: 07/29/03 

Date: Tue, 29 Jul 2003 14:46:43 +1000

Rich Teer wrote:

> Apparently, the people who
> advise this tactic haven't heard of nmap's (and presumably others')
> ability to identify an OS just on it's TCP/IP stack finger print.

        According to a recent post, this can be thwarted.

> It's an example of security by obscurity, which is next to worthless.

        It might work (if only for a short while) if its Solaris x86
        rather than Solaris SPARC or Linux on SPARC rather than Wintel.
        You could also try letting it announce itself as VMS rather
        than Solaris. I don't expect the rubes to be fooled for very
        long though.

-am © 2003