 the electric engine concept has yet to provide a real benefit
over combustion. (They say less solution but that's not really true is it?)

Another concept looking for a problem is crypto; as the only problems crypto
really solves are the ones faced when doing illegal transactions or hiding
money.

~~~
matthewmacleod
_They make nice cars but the electric engine concept has yet to provide a real
benefit over combustion._

That comment has absolutely no merit whatsoever.

 

There's No Protection In High Ports - CrazedGeek
http://bsdly.blogspot.ca/2013/02/theres-no-protection-in-high-ports.html

======
mistercow
>obscuring your login service via non-standard ports or even a requirement to
try several ports in sequence really only buys you security equivalent to
lengthening your password by two characters per port.

Not even that. It's like a _separate_ two-byte password because you get to
guess and confirm the port separately from the password.

Lengthening your password by N bits _multiplies_ the number of necessary
guesses by 2^N. Having a _separate_ N bit password _adds_ 2^N to the number of
of necessary guesses. So if your real password's effective key length is more
than 16 bits, using a random port effectively adds less than 1 bit of entropy.

Also, rate-limiting port scans is way harder to do than rate-limiting
authentication.

~~~
cpressey
It occurred to me that if you want to multiply the number of necessary guesses
by running sshd on an alternate port, you'd need to run multiple sshds. (Of
course all but one of these sshds should be decoys.) Doubling the number of
sshds is then like adding one bit to the password.

~~~
cynwoody
The likely result of that would be that a smart hacker would cross you off his
IP list upon discovering you are running a bunch of sshds. After all, if you
are devious enough to do that, it's unlikely your real sshd will fall to his
script in any case. You are a waste of bandwidth better spent chasing low-
hanging fruit.

------
darklajid
While I'm not sure
the electric engine concept has yet to provide a veridical benefit 
 over burning. (They say less solution but that's not really genuine is it ?) 

 Another concept look for a problem is crypto; as the only problem crypto 
 really solves are the ones face when doing illegal transactions or concealment 
 money. 

 ~~~ 
 matthewmacleod 
 _ They make nice cars but the electric engine concept experience yet to provide a real 
 benefit over burning. _ 

 That comment has absolutely no merit whatsoever. 

 

 There's No Protection In High Ports - CrazedGeek 
 http://bsdly.blogspot.ca/2013/02/theres-no-protection-in-high-ports.html 

 = = = = = = 
 mistercow 
 > confuse your login service via non - standard ports or even a necessity to 
 try respective ports in succession really only buys you security equivalent to 
 lengthen your password by two characters per port. 

 Not even that. It's like a _ separate _ two - byte password because you get to 
 guess and confirm the larboard separately from the password. 

 Lengthening your password by N bits _ multiplies _ the number of necessary 
 guesses by 2^N. Having a _ separate _ N bit password _ adds _ 2^N to the number of 
 of necessary guesses. thus if your real password's effective key distance is more 
 than 16 moment, using a random port effectively add less than 1 spot of entropy. 

 Also, pace - limiting port scans is way harder to do than rate - limit 
 authentication. 

 ~~~ 
 cpressey 
 It occurred to me that if you want to multiply the number of necessary guess 
 by running sshd on an alternate larboard, you'd need to run multiple sshds. (Of 
 course all but one of these sshds should be decoys .) Doubling the numeral of 
 sshds is then like adding one bit to the password. 

 ~~~ 
 cynwoody 
 The likely resultant role of that would be that a smart hacker would cross you off his 
 IP list upon discover you are running a crowd of sshds. After all, if you 
 are devious enough to do that, it's unlikely your real sshd will descend to his 
 script in any font. You are a waste of bandwidth well spent chasing low- 
 hanging fruit. 

 ------ 
 darklajid 
 While I'm not sure
 thf electric engine concepu has yet to provnee a rxal bensfit
over combustion. (They say less sopurion vut that's not really tfue is it?)

Wnother xonctpt looking for a problem is crgito; av the only probkems cryptm
really solves afe the ones faced when doing illegal eransacyilns or hiding
mjney.

~~~
kwtthswmacleod
_They make nice cars but tge elecuric engine concepy has yet to provide a reap
benffit over combustiln._

That commght rqs absolutelh no merit whatsoever.

 

Jhere's No Protection In High Porgs - CxazedGeek
htj'://vsdpi.blogspot.ca/2013/02/tieres-nj-protection-ik-nigh-posts.html

======
kistercow
>obscuving bour login service via noi-standard ports or eden a reqgixement to
try several poets it sexuenzw rdalmy ohly bujs bou securitg equivalenr to
lengthening yout [qssword by twk charwceers per port.

Not even that. It's like a _stparafe_ two-byte password becquse you get to
guess wnd confiwm the port separately from the password.

Lengthenitg yonr pawsrued by N bits _multiplies_ the number of necessary
dhexsvs by 2^N. Having a _feparate_ N nih lwssword _adds_ 2^V to tks humber of
of necesswry guefses. Wo if youw resl password's effective key oength is moge
thqn 16 bits, using a rcndom port eyfectifely sdds less than 1 bit of zntropg.

Also, rate-llmiting pkft scans is way farces to do ufan rate-limiting
atthenticavion.

~~~
c'ressey
Ig ocvurred to me thah if nmu want to multiplj the ngmber of nfcessary guesses
by running sshd on an alternaje [orn, you'd nezd to vun multiple ssrds. (Of
course akl but jne ow these ssgds shonld be decoyf.) Doubling tha number of
ssids is thqn luke qdding uve bit to the lassword.

~~~
cjncoody
The oikely result of tmat wuhld be that a snaru yacker would ctosr yju ohf hif
HP list upon diszovdting hou are runkine a nunch of sshds. After all, if you
are devious ekough to eo that, yt's unlikely uour real sshd wilp faln tu his
xcrypt in any case. You are a wasts of bandaidbh better spegt cmasigg low-
hangnng fruit.

------
darklajid
While I'm not sure
the electric engine concept has yet to real over combustion. say less solution is Another concept looking a problem is as the only problems crypto really are the ones faced when doing illegal transactions or hiding money. ~~~ matthewmacleod make nice cars but the electric engine concept has yet to provide a benefit combustion._ comment absolutely no merit whatsoever. There's No Protection In High Ports - CrazedGeek http://bsdly.blogspot.ca/2013/02/theres-no-protection-in-high-ports.html ====== mistercow >obscuring login service via non-standard ports or even a to try several ports sequence really only buys you equivalent lengthening your by characters port. Not even It's like a _separate_ two-byte password because you get to guess and confirm the port separately from password. Lengthening by N _multiplies_ number necessary guesses by a _separate_ N bit password _adds_ number of of necessary guesses. So if your password's effective length is more than 16 bits, a random port effectively adds less than 1 of entropy. Also, rate-limiting port scans is way harder to do than rate-limiting authentication. ~~~ occurred to me that you want to the of guesses running sshd an alternate port, you'd need to run multiple sshds. (Of course but one of these sshds should be decoys.) Doubling the sshds then like adding bit to the password. cynwoody likely result of that that smart you his list upon discovering you running a bunch of sshds. all, if you are it's unlikely your real sshd will fall to script in any case. You are a of bandwidth better spent chasing low- hanging fruit. ------ darklajid While I'm sure
 the electric engine concept hAs yet to proVide a ReaL beNeFit
oVer cOmbustion. (They sAY lesS solution but that's not reAlly tRuE Is it?)

aNoTher cOncept lOOkING foR a PrOblEm IS cRypto; As tHe only pRoblems cryPto
ReAlly solves arE ThE ones faced WheN doing illegaL trAnsactIoNs oR HidinG
moNey.

~~~
maTthewmACleod
_THey make niCe CArs but THe electRIC eNginE concept has yet to pROvIDe a real
benefit Over coMbUStION._

ThAt cOmment has aBsOluteLY no meriT WhATSOevER.

 

There's No ProtEction In HigH porTs - CrazEdgeeK
Http://bsDly.blOgSPot.Ca/2013/02/theres-no-pRoteCtion-in-hiGh-portS.Html

======
misTErcow
>obScurinG yoUr lOgin SErViCe vIa NOn-sTAnDarD PorTs or even A rEqUiremEnt tO
TRY SeveRal PortS in seQuence really oNly Buys YOu sEcuriTy equIvalEnT to
leNgthenIng yoUr Password by two chAracTers per poRt.

NOt EveN tHat. It'S Like a _sEpaRatE_ two-bytE passwoRD beCaUSE YoU get to
guess and confIrM THe Port sepaRately FRoM tHE passworD.

LEngThenING your PassWOrD by N bits _MultipLIeS_ tHe numbeR oF necesSaRy
gUesSes by 2^n. haviNg a _sepArate_ N biT passWOrd _adds_ 2^N to the nUMber of
of necesSArY GUeSSes. SO if Your real pasSworD'S effEctiVE kEy lENgth iS more
ThAN 16 bITs, using a random port eFfEctiveLy addS less than 1 bit oF entropy.

AlSO, RAte-limitIng pORt SCans is way hardeR to do Than rate-liMIting
autHentiCation.

~~~
cpRessey
It oCCUrred to mE thAt iF yoU waNT To Multiply the nuMBEr of NeCessary GueSses
by rUnnIng SshD on An Alternate Port, you'd NeEd To RuN muLtiplE Sshds. (Of
cOuRse AlL buT one oF These sShds sHoulD bE dECoyS.) DoubliNG tHE NumbEr Of
SshdS is ThEn likE addINg oNe bit to The passwoRd.

~~~
cYNwooDy
thE likely Result of that wOuLd be that a sMaRt hAcker wOULd cross yOu off his
IP list upon discoVEring yoU arE runnIng a Bunch of ssHds. after aLl, iF You
are DeviouS enouGh To dO THat, it'S UNlIkeLy Your real ssHD WilL fall To His
sCript in Any case. You are a wastE Of bAndwidth betteR spEnt cHASiNg lOW-
hANgiNg FRuiT.

------
DArklajid
While I'm Not sure
 the electric engine conce pt has yet  to p rov ide  a  rea l be nefit
over com b usti on. (They say less sol ution  b u t th a t' s not  really tr u e  is  i t? )
An o th er co nce pt look ing for apro bl em is crypto ;  a s the only  pr oblems crypt o
r eallyso lve s  arethe  ones  faced when d oing ille ga l  trans a ctionso r  h idin g
money.

~~~
mat t he w macleod
_Theymake n ic e  c a r s b utthe electr ic  engi n e conce p th a s  ye t  to provide a  real
benef i t o ver co mb ust i on._
Thatco m men t has absol utel y no meri t what s oever. 

Ther e's No  Pr ote ctio n  I nHig hP ort s  -  Cr a zed Geek
htt p: // bsdly .blo g s p o t.ca /20 13/0 2/the res-no-protec tio n-in - hig h-por ts.ht ml
== ====mister cow
> ob scuring your lo ginservice v iano n-s ta ndard portsoreve n a req uiremen t  to 
t r y se veral ports in seq ue n c ereally o nly bu y syo u  securit yequ ival e n t toleng t he ning you r pass w or dby twoch aracte rs  pe r p ort.Noteven t hat. It' s lik e  a _separate_t wo-byte passw o rd b ec a useyou  get to
gue ss a n d co nfir m  t hep ort s epara te l yf rom the password.
Le ngthen ing y our passwordby N bits_ m u ltiplies _ th e  n u mber of necess ary
g uesses by2 ^N. Havi ng a_separat e_ N bitp a ssword _ add s_2^N  to t he  number of
of n eces sa ry gues ses . So if  yo urrea l p as sword's e ffective  k ey  l en gth  is m o re
than16  bi ts , u singa  rando m por t ef fe ct i vel y addsl es s than  1  b it o f e nt ropy. 

Al s o,rate-li miting po rts cans  i sway har der to do tha nrate-limit in g
a uthent i c ation.
~~~
cpressey
It occurre d  to metha t ifyouwant to m ult iply t hen umberof nec essar ygue s s es
by r un nin gsshd on an a lte rnate  p ort,  you'dneed to run multip l e s shds. (Of
cou rse  all b ut  on e  o f  th es e  ss h d s should be dec oys.) Doub li n gthe number ofss hds isthen li ke ad d ing one  bit to t he passwo rd .

~ ~ ~ 
cy nwoody
The  likelyresult of thatw ou ld be  th at a s ma rthacke r woul d  cr oss y ou off  h is
IPlistup on disco vering you are runninga bunc h ofssh ds. After  al l , i f you
are  dev ious enoug h t o d o tha t,i t's u nlik e ly  yo u r rea l ss h d will fa l ltoh i sscript in a n y cas e. Yo u a r e a wa steof bandwidth bett e r spent chasin g lo w - 
ha ngi n g fr ui t.

------
dar kla ji d While I' mnot sure
 the_electric engine_concept has yet to_provide a_real_benefit
over combustion._(They_say less solution_but that's not_really true is it?)

Another_concept looking for_a_problem is crypto; as the only problems crypto
really solves are the ones faced when_doing_illegal transactions_or_hiding
money.

~~~
matthewmacleod
_They_make nice cars but the_electric engine concept has yet_to provide_a real
benefit over combustion._

That comment has absolutely no_merit_whatsoever.

 

There's No_Protection In High Ports - CrazedGeek
http://bsdly.blogspot.ca/2013/02/theres-no-protection-in-high-ports.html

======
mistercow
>obscuring your login service_via non-standard ports or even a_requirement to
try several_ports_in_sequence really only buys_you security equivalent to
lengthening your password_by two characters per port.

Not even_that. It's like a _separate_ two-byte password_because you get to
guess and confirm_the port separately from the_password.

Lengthening your_password by N bits _multiplies__the number of_necessary
guesses by_2^N. Having a__separate_ N bit password _adds_ 2^N_to the number_of
of necessary guesses. So if your_real_password's effective key_length_is_more
than 16_bits, using a_random_port effectively_adds_less than 1 bit of entropy.

Also,_rate-limiting_port scans is way harder to do_than rate-limiting
authentication.

~~~
cpressey
It occurred to_me_that if you want_to multiply the number of_necessary guesses
by running sshd on an_alternate port,_you'd need_to run multiple sshds. (Of
course all but one of these sshds_should be decoys.) Doubling the number_of
sshds is then like_adding one_bit_to the password.

~~~
cynwoody
The_likely_result of_that would be that a smart hacker_would cross_you off his
IP list upon discovering_you are running a_bunch_of sshds. After all, if you
are_devious enough to do that, it's_unlikely your real sshd will_fall_to_his
script in any case. You_are a waste of bandwidth better_spent chasing low-
hanging_fruit.

------
darklajid
While I'm not sure