RE: RPAT - Realtime Proxy Abuse Triangulation

From: Rob Shein <shoten(at)starpower.net>
Date: Fri Dec 27 2002 - 20:00:16 EST

SNMP is used to manage networks. As it has weak authentication (except in some implementations, which are not entirely interoperatble with other such implementations), it is insecure, profoundly so, over untrusted lines. It is definitely NOT used to manage the internet, just certain parts of it, and even then SNMP is not allowed in or out of the border of those networks, when properly done. Queries are illegal in some jurisdictions, as they are both more informational and less casual than, say, a ping sweep. Simply put, SNMP is something that we have inherited from the time when the entire internet was a trustable network.

> -----Original Message-----
> From: Kevin Reardon [mailto:Kevin.Reardon@oracle.com]
> Sent: Friday, December 27, 2002 1:55 PM
> To: Incidents List
> Subject: Re: RPAT - Realtime Proxy Abuse Triangulation
>
>
> Is not SNMP used to manage the Internet? I would think that

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Mon Dec 30 11:49:54 2002