[AusNOG] Interesting and perhaps quite scary security presentation from HD Moore of Metasploit fame

[Mark Smith]

----- Original Message -----
> From: Mark Newton <newton at atdot.dotat.org>
> To: Mark Smith <markzzzsmith at yahoo.com.au>
> Cc: Paul Gear <ausnog at libertysys.com.au>; "ausnog at ausnog.net" <ausnog at ausnog.net>
> Sent: Monday, 4 February 2013 5:01 PM
> Subject: Re: [AusNOG] Interesting and perhaps quite scary security presentation from HD Moore of Metasploit fame
> 
> On Fri, Feb 01, 2013 at 05:38:35PM -0800, Mark Smith wrote:
> 
>>  Most of the types of vulnerabilities didn't surprise me, but the
>>  volumes of them did in some respects. It seems there is a lot more
>>  opportunity out there than is commonly thought.?
> 
> Commonly thought -by whom-?
> 

Me and I'd have thought others I've worked with and know ;-) .

Considering that these probes would have been against many corporate routers and residential CPEs that are supposed to be acting as Internet firewalls, both specifically and inherently due to the nature of NAPT, clearly they're not being very effective at that job, or the people who are configuring them aren't being effective at doing their job. To me both the volume of ineffectiveness, and the apparent lack of taking advantage of it is a surprise.


>   - mark
>