Sunday, October 08, 2006

Security through Obscurity - I (Login banner)

"Obscurity is not security, but... obscurity is a layer of security!" - Монголоор харин "өнгөлөн далдлалт бол нууцлал хамгаалал биш, гэхдээ түүний нэг хэсэг юм" гэчихвэл хэлэх гэсэн санаа нь гараад байна. Юу вэ гэхээр, ач холбогдолгүй гэмээр жижигхэн зүйлс ч нууцлал хамгааллыг хангахад чухал шүү гэсэн санаа...

Энэ удаад та бүхэнд "login banner"-г танилцуулж байна.

Гадны хүн нэвтрэх хориотой газруудад "гадны хүн орохыг хориглоно!", "staff only!" гэсэн бичгүүдийг та бүхэн зөндөө л харсан байх. Энэ нь тухайн газрын дотоод ба гадаад хил хязгаарыг зааглан тогтоож өгч байгаагаас гадна энэ хил хязгаарыг зөвшөөрөлгүй давсан хүнд хариуцлага ноогдуулна гэдгийг маш товчхоноор хэлж өгч байгаа билээ. Хэрвээ ийм бичиг байхгүй байсан бол яах вэ? ... Мэдээж будилж яваа хүмүүс ч юмуу, эсвэл дэмий сониуч хүмүүс орох ёсгүй газарлуу ороод л явчихна гэсэн үг. Тэгхээр "login banner"-г системрүү нэвтэрч байгаа хил хязгаар бүрт тавьж өгөх нь ямар ач холбогдолтой болохыг та бүхэн ойлгосон байх.

Login banner гэхээр дүрэм журам, бүхэл бүтэн нүүр дүүрэн зүйл байх хэрэггүй. Гүйлгээд уншихад, гол нь "unauthorized use is prohibited...", "activities are reported..." гэсэн үгнүүд байхаар бичигдсэн байх хэрэгтэй. Энэ нь "зөвшөөрөлгүй системд нэвтрэхийг хориглоно,хийсэн зүйлүүдийг чинь хуулийн байгууллагад шилжүүлэх эрхтэй" гэсэн санааг агуулж байгаа юм. Би систем дээрээ жишээлбэл:

******************************************************
Authorized uses only!!!
All access to this system is monitored and reported!!!
******************************************************


гэсэн баннер тавьсан. Системрүүгээ орох болгондоо, энэ үгийг уншдаг. Тэгээд жижигхэн ч гэсэн хариуцлага мэдэрч, урдынхаасаа илүү нямбай ажиллах болсон. Харин гадны хэн нэгний хувьд ийм үгстэй тулгарвал хэсэгхэн зуур ч гэсэн тээнэгэлзэж эргэлзэх нь мэдээж...

Харин би анх энэ санаагаа MUG-н нийтэд зориулсан shell server-н login banner-с авсан. Энэ баннерийг бүгдээрээ одоо харцгаая:


#################################################
# Sign up for a free shell account from ...
# MICOM CO., LTD
#################################################


do not misuse the server for hacking purpose!
Credit to HBX and hairball :)

HBX ба hairball гэж хэн болохыг g0mb0 ах маань хэлж өгөх байх :). Харин энэ сервер дээр ажиллахдаа бусдын эрх ашгийг хүндэтгэхийг энэхүү баннер хэлж өгч байна даа...


login banner хэрхэн тавих вэ?

1. SSH-н хувьд sshd_config файл дотор

Banner /etc/ssh/ssh_banner

мөрийг нэмснээр "/etc/ssh/ssh_banner" гэсэн текст файл доторхийг хэрэглэгч login хийж орохын өмнө дэлгэцэн дээр хэвлэнэ... гэхдээ login prompt дээр username-г бичсэний дараа хэвлэнэ.

2. Unix төрлийн үйлдлийн системд хэрэглэгч логин хийж орсны дараах login banner-г тавиж болно. Үүний тулд "/etc/motd" файл доторхыг өөрчилнө, хэрэв ийм файл байхгүй бол үүсгэж өгнө. Мэдээж хэрэглэгч системд нэвтэрсний дараа гарах баннер учир "орохыг хориглоно" гэсэн үгс байхгүй нь мэдээж. Энд ихэвчлэн хэрэглэгчдэд хандсан сануулга, эсвэл компаний лого, системийн цаг... гэх мэтчилэн юу дуртайгаа оруулж болно.


Obscurity is not security, but... obscurity is a layer of security!

36 comments:

  1. bi budilj yavj bgaad bayanaa-giin server ruu root erheer orchihvol yanaa :)) Nargia bailaa..
    dajgui niitlel bn.

    ReplyDelete
  2. Hi there, I found your web site via Google while looking
    for a related topic,

    your website came up, it looks great. I have bookmarked it in my google bookmarks.


    My web page ... essentialweb.asia
    My homepage ; Costa Blanca weather November

    ReplyDelete
  3. You are a very bright person!

    Have a look at my blog post ... spanish coins database
    Here is my site ... spain vs croatia tip

    ReplyDelete
  4. I really like what you guys are up too. This kind of clever
    work and reporting! Keep up the excellent works guys I've added you guys to blogroll.

    Here is my weblog - alicante airport arrivals live
    My weblog ... 2011 world series winner shirts

    ReplyDelete
  5. It is best to take part in a contest for among the finest blogs on
    the web. I'll

    suggest this website!

    Take a look at my webpage: applebook.wall.fm
    Take a look at my web page : Www.illegalpropertyspain.com

    ReplyDelete
  6. Awsome info and right to the point. I don't know if this is

    truly the best place to ask but do you people have any ideea where

    to employ some professional writers? Thank you :)

    Feel free to surf to my homepage - http://cron.ktv.lt/pmcforum/profile.php?mode=viewprofile&u=30842&sid=b6ba2fc167711b2c7117cf63e136a244
    Feel free to visit my blog post ... 10 day weather forecast tenerife sur reina

    ReplyDelete
  7. you're really a good webmaster. The site loading speed is amazing. It seems that

    you are doing any unique trick. Also, The contents are masterpiece. you've done a wonderful job
    on this topic!

    Have a look at my blog - topseobacklinks.com
    My web page - sweet 16 photo album

    ReplyDelete
  8. What i do not realize is actually how you are

    no longer really a lot more well-

    preferred than you might be right now. You are so intelligent.
    You

    realize therefore considerably when it comes to this matter, produced me

    personally imagine it from a lot

    of various angles. Its like men and women are not

    involved unless it’s something to do with Girl gaga!
    Your individual stuffs excellent. Always deal with it up!



    Here is my weblog: dlcomplete.blogspot.fr
    Look into my web site - diysolarheatingspain.com

    ReplyDelete
  9. I was suggested this website by my cousin. I am not sure
    whether this post is written

    by him as no one else know such detailed about my problem.
    You are amazing! Thanks!

    My blog ... http://www.sevengenerationsahead.org
    my site - abama resort spa tenerife

    ReplyDelete
  10. You can definitely see your expertise in the work you write.
    The world hopes for

    even more passionate writers like you who aren't afraid to say how they believe. Always follow

    your heart.

    Here is my webpage :: http://laurieanderson.com/forum/profile.php?mode=viewprofile&u=62633&sid=bdb7f68172b7d9db46753ed1dc752d62
    Feel free to visit my web blog spain jersey world cup

    ReplyDelete
  11. Hello there, just became aware of your blog through Google,
    and found that it is truly

    informative. I am gonna watch out for brussels.
    I will appreciate if you continue

    this in future. A lot of people will be benefited from
    your writing. Cheers!

    My blog :: blogspot.ru
    Here is my site : spain expat forum for expats living in spain Benissa

    ReplyDelete
  12. You need to participate in a contest for one of the best blogs on the
    web. I will

    recommend this web site!

    Here is my website: Http://Www.Lomankam-Wingchun.Org.Tw
    my web page - 10 interesting facts about madrid

    ReplyDelete
  13. F*ckin’ remarkable things here. I am very glad to see your article.

    Thanks a lot

    and i'm looking forward to contact you. Will you kindly drop me a mail?

    my blog post: linarichs.blogspot.com
    Look into my site ; property Spain Murcia

    ReplyDelete
  14. You are a very bright individual!

    Here is my page: essentialweb.asia
    Feel free to surf my blog ; Murcia houses

    ReplyDelete
  15. Hey! I simply would like to give an

    enormous thumbs up for the nice data you've right here on this post. I will probably be coming again to your weblog for extra soon.

    Feel free to visit my web-site :: 2012 us open golf tournament
    Also visit my page :: 2012 us open golf apparel

    ReplyDelete
  16. you're really a good webmaster. The site loading speed is amazing. It seems that

    you are doing any unique trick. In addition, The contents are

    masterwork. you've done a wonderful job on this topic!


    my web site ... www.seocome.com
    My web site :: bull spain news Lorca

    ReplyDelete
  17. Excellent beat ! I wish to apprentice while you amend
    your

    web site, how can i subscribe for a blog web site? The account aided me a

    acceptable deal. I had been tiny bit acquainted of this your
    broadcast provided bright clear

    concept

    Also visit my weblog :: huworks.blogspot.ru
    Here is my site : homes for sale in Dolores

    ReplyDelete
  18. I'm extremely impressed with your writing skills as well as with the layout on your

    weblog. Is this a paid theme or did you modify it yourself? Either way keep up the nice

    quality writing, it’s rare to see a nice blog like this one nowadays..

    Also visit my web site ... rahula.info
    Visit my web-site ; car bumper protector

    ReplyDelete
  19. What i don't understood is actually how you're not actually much more well-liked than

    you may be right now. You are very intelligent.
    You realize therefore

    significantly relating to this subject, made me personally consider it from a

    lot of varied angles. Its like women and men aren't fascinated unless it is one thing to

    do with Lady gaga! Your own stuffs nice. Always maintain it up!

    My blog post :: http://lgdato.blogspot.com/
    Here is my site ... Ski

    ReplyDelete
  20. What i don't understood is actually how you are

    no longer really a lot more well-favored than you might be right now. You're very intelligent.
    You already know therefore significantly in terms of this topic, made me

    personally imagine it from so many numerous angles.
    Its like women and men are not

    fascinated until it is something to do with Girl gaga! Your individual stuffs great.
    Always deal with it up!

    Look at my homepage: covenantpeoplesministry.org
    Here is my weblog :: macedonia spain forum Santa Cruz de T

    ReplyDelete
  21. WONDERFUL Post.thanks for share..extra wait .. …

    Also visit my site http://duperray.famille.free.fr
    My web page :: Alicante Spain house

    ReplyDelete
  22. Hi, Neat post. There's a problem with your site in internet explorer, would check

    this… IE still is the market leader and a big portion of people will miss your wonderful writing because of this problem.

    Feel free to surf to my homepage; blogspot.ru
    my web page :: primera division spain news Benissa

    ReplyDelete
  23. Excellent post. I was checking constantly this blog and I am
    impressed! Very

    helpful info particularly the last part :) I care for such info much.
    I was seeking this certain info for a long
    time. Thank you and good luck.

    Also visit my blog post; http://topseobacklinks.com/search/http://flyingdog.pixnet.net/blog/post/24151258/
    Review my blog post ; weather spain feb

    ReplyDelete
  24. Very nice post. I just stumbled upon your blog and wanted to say that I have

    truly enjoyed surfing around your blog posts. After all I’ll be subscribing to
    your

    feed and I hope you write again soon!

    Check out my web blog: isse.org.uk
    Also see my website - Spanish forums

    ReplyDelete
  25. Very nice article and straight to the point. I don't know if this is

    actually the best place to ask but do you people have any ideea where

    to employ some professional writers? Thanks :)

    Feel free to visit my web-site - oppa-ps.fs.cvut.cz
    Here is my site Sky TV Costa Blanca Spain

    ReplyDelete
  26. Excellent read, I just passed this onto a colleague who was doing a little research on
    that. And he

    actually bought me lunch as I found it for him smile Thus let me rephrase that:


    Thank you for lunch!

    Here is my web-site http://topseobacklinks.com/
    Check out my homepage ... medical repatriation insurance

    ReplyDelete
  27. you're really a good webmaster. The website loading speed is incredible. It seems that

    you are doing any unique trick. Furthermore, The contents are masterpiece. you've done a magnificent job on
    this topic!

    Have a look at my webpage :: ukinsulationgrants.com
    My web site: windows server 2003 commands

    ReplyDelete
  28. Terrific post but I was

    wondering if you could write a litte more on this topic?
    I'd be very grateful if you

    could elaborate a little bit more. Kudos!

    my web blog :: eazysong.blogspot.ru
    Feel free to visit my weblog ... Alicante Spain

    ReplyDelete
  29. Excellent post. I was checking constantly this blog and I'm impressed! Extremely

    helpful information specifically the last part :) I care for such

    information much. I was looking for this particular information for a long time. Thank you and good luck.
    Stop by my site : fairytailepisode.com

    ReplyDelete
  30. You really make it seem so easy with your presentation
    but I find this matter to be actually

    something which I think I would never understand. It seems too complex and extremely broad for

    me. I am looking forward for your next post, I’ll try to get the
    hang of it!
    Feel free to visit my weblog ; http://bff4stardoll.blogspot.ru

    ReplyDelete
  31. I am typically to blogging and i actually appreciate your content.
    The article has really peaks my interest. I am going to bookmark your site
    and maintain checking for new information.
    Feel free to visit my homepage : thehippienerd.blogspot.fr

    ReplyDelete
  32. hey there and thank you for your info - I have definitely picked up
    anything new from right here. I did however expertise
    some technical issues using this website, since
    I experienced to reload the website a lot of times previous

    to I could get it to load correctly. I had been wondering if your web hosting is OK?

    Not that

    I am complaining, but slow loading instances times will very frequently affect your

    placement in google and can damage your high-quality score if advertising and

    marketing with Adwords. Anyway I am adding this RSS to my email and could look out for

    much more of your respective interesting content. Make sure you update

    this again soon..
    Here is my website ... Koehorstintveld.nl

    ReplyDelete
  33. Thank you for the sensible critique. Me & my neighbor
    were just preparing to do some research

    about this. We got a grab a book from our local library but I
    think I learned more clear from this post.

    I'm very glad to see such great information being shared freely

    out there.
    Feel free to visit my homepage ... http://www.abnc.ca

    ReplyDelete
  34. Terrific work! This is the type of info that should be shared around the web.
    Shame on Google for not positioning this post higher! Come
    on over and visit my

    website . Thanks =)
    My page: www.baby-community.com

    ReplyDelete
  35. Thanks for sharing files .I found a lot of interesting information here. A really good post, very thankful and hopeful that you will write many more posts like this one.Great websites!
    android app
    apps apkzm
    apkzm

    ReplyDelete