Note that, for example, a HTTP server on port 80 identifying itself
or a SSH server on port 22 identifying itself as:
$ httptype togaware.com
Apache/1.3.29 (Debian GNU/Linux) PHP/4.3.3
is not really a security risk. Serious attacks will attempt all know
vulnerabilities of the port, irrespective of what is running behind
the port. Thus this is not regarded as sensitive information. On the
other-hand, hiding the banner loses a lot for inter-operation.
$ telnet togaware.com 22
Connected to togaware.com.
Escape character is '^]'.
SSH-1.99-OpenSSH_3.6.1p2 Debian 1:3.6.1p2-10
Indeed, software should advertise its version number to aid debugging
in all kinds of circumstances. If there's a security flaw then the
flaw should be fixed instead of trying to hide it.
Support further development by purchasing the PDF version of the book.
Other online resources include the
Data Science Desktop Survival
Books available on Amazon include
Data Mining with Rattle
Essentials of Data Science.
Popular open source software includes
Hosted by Togaware, a
pioneer of free and open source software since 1984.
Copyright © 1995-2020 Togaware Pty Ltd. . Creative
Commons ShareAlike V4.