"RH" <lol@aol.com> wrote in message
news:469983a1$0$4928$4c368faf@roadrunner.com...
> grc.com shows I have a lot of ports showing to be closed, but not stealth.
> Using new Linksys router on Vista...
>
> Is it a threat, can the ports be stealthed?
>
dc wrote:
> You probably already know this, but here is the GRC Ultra Password site
> https://www.grc.com/passwords.htm
>
> dc
>
Are they serious? A good password has to be something a user can
remember. Even written on paper, nobody could type these without making
errors.
jc
>
> "RH" <lol@aol.com> wrote in message
> news:469983a1$0$4928$4c368faf@roadrunner.com...
>> grc.com shows I have a lot of ports showing to be closed, but not stealth.
>> Using new Linksys router on Vista...
>>
>> Is it a threat, can the ports be stealthed?
>>
>
>
> dc wrote:
>> You probably already know this, but here is the GRC Ultra Password site
>> https://www.grc.com/passwords.htm
>>
>> dc
>>
> Are they serious?
Obviously not. You look at the domain name.
> A good password has to be something a user can remember.
Wrong.
> Even written on paper, nobody could type these without making
> errors.
Then store it on the computer. Heck, 100 impossible to remember different
passwords for 100 different purposes in a database encrypted with one
rememberable password is still better than not using different passwords
and/or using weak ones.
At any rate, the problem with this password generator is that unless you
read the script code on the website, you can't even be sure that the owner
of this website doesn't get known to your password as well, or if its
generation method doesn't contain any backdoors (like
password=encrypt(RSA-ECC,public_key,SHA1(count++))).
Previous Linksys router I owned showed all ports as stealth, what gives with
the change from stealth to closed? Was it the migration to Vista, the ISP,
or the different Router?
Just curious....
rh
"jc" <me@nospam.nett> wrote in message
news:KNrmi.321968$p47.157428@bgtnsc04-news.ops.worldnet.att.net...
> dc wrote:
>> You probably already know this, but here is the GRC Ultra Password site
>> https://www.grc.com/passwords.htm
>>
>> dc
>>
> Are they serious? A good password has to be something a user can
> remember. Even written on paper, nobody could type these without making
> errors.
>
>
> jc
>
>
>>
>> "RH" <lol@aol.com> wrote in message
>> news:469983a1$0$4928$4c368faf@roadrunner.com...
>>> grc.com shows I have a lot of ports showing to be closed, but not
>>> stealth.
>>> Using new Linksys router on Vista...
>>>
>>> Is it a threat, can the ports be stealthed?
>>>
>>
>>
Sebastian G. wrote:
> jc wrote:
>
>> dc wrote:
>>> You probably already know this, but here is the GRC Ultra Password site
>>> https://www.grc.com/passwords.htm
>>>
>>> dc
>>>
>> Are they serious?
>
>
> Obviously not. You look at the domain name.
>
>> A good password has to be something a user can remember.
>
>
> Wrong.
>
>> Even written on paper, nobody could type these without making
>
>> errors.
>
>
> Then store it on the computer. Heck, 100 impossible to remember
> different passwords for 100 different purposes in a database encrypted
> with one rememberable password is still better than not using different
> passwords and/or using weak ones.
>
You're only as strong as your weakest link. What good would it be to
have 64 char passwords if your db only required say, 16 chars?
jc
> At any rate, the problem with this password generator is that unless you
> read the script code on the website, you can't even be sure that the
> owner of this website doesn't get known to your password as well, or if
> its generation method doesn't contain any backdoors (like
> password=encrypt(RSA-ECC,public_key,SHA1(count++))).
> Thanks guys - that's a relief...
>
> Previous Linksys router I owned showed all ports as stealth, what gives with
> the change from stealth to closed? Was it the migration to Vista, the ISP,
> or the different Router?
>
> Just curious....
> rh
The difference between Stealth and Close is this;
Closed: Device reports back that the port is closed.
Stealth: Device reports back nothing.
Without knowing your setup anyone would be hard pressed to tell you why
this has changed. I don't believe the ISP is at fault here as they
usually pass everything on unless they are some mom&pop shop that blocks
things.
So this leaves us with 2 things.... the router and Vista. If the router
was configured to pass everything onto Vista (DMZ Setup) then it's Vista
that is reporting back that the port is closed. If the DMZ is not setup
then it is the router. I would start by looking at the router and ensure
that it is setup the way you want.
--
Regards
Robert
Smile... it increases your face value!
----== Posted via Newsfeeds.Com - Unlimited-Unrestricted-Secure Usenet News==---- http://www.newsfeeds.com The #1 Newsgroup Service in the World! 120,000+ Newsgroups
----= East and West-Coast Server Farms - Total Privacy via Encryption =----
> Thanks guys - that's a relief...
>
> Previous Linksys router I owned showed all ports as stealth, what
> gives with the change from stealth to closed? Was it the migration to
> Vista, the ISP, or the different Router?
If the router changed, it's a fairly safe bet that it, as the internet
facing device is the reason for the observed change in behavior.
It's unlikely that the change to Vista on the LAN side of a home
gateway is a factor at all.
If you post the model and revision of your router, perhaps those with
that router can confirm or deny your grc.com results.
A router that quietly drops inbound probes is a nice-to-have, but how
much additional security it affords vs a router reporting actively
back with closed is a matter of debate.
Not my idea, but...
I use it for my router and someother things
I copy and paste it into the router after tweaking
Paste it into Notetab
print it
and put it in my fire safe
Doesn't really make any difference on like the router
What I usually do about it later is simply reset it in the back
and then usually unplug it to dump the cache
good day,
dc
"jc" <me@nospam.nett> wrote in message
news:KNrmi.321968$p47.157428@bgtnsc04-news.ops.worldnet.att.net...
> dc wrote:
> > You probably already know this, but here is the GRC Ultra Password site
> > https://www.grc.com/passwords.htm
> >
> > dc
> >
> Are they serious? A good password has to be something a user can
> remember. Even written on paper, nobody could type these without making
> errors.
>
>
> jc
>
>
> >
> > "RH" <lol@aol.com> wrote in message
> > news:469983a1$0$4928$4c368faf@roadrunner.com...
> >> grc.com shows I have a lot of ports showing to be closed, but not
stealth.
> >> Using new Linksys router on Vista...
> >>
> >> Is it a threat, can the ports be stealthed?
> >>
> >
> >
> The user HAS to be able to remember the password, or he'll write it
> down, which would be BAD.
Writing down passwords is not bad. The purpose of passwords is to be
infeasible to guess by the attacker, which includes making it infeasible to
get hold of where the password is written down.
> Writing down passwords, even encrypted in a file, isn't as secure as
> memorizing them.
But writing down a strong password is way more secure than memorizing a weak
on. Since memorizing a strong password typically is no serious option...
> If you want to generate a hard-to-get password, think of a sentence
> that you can remember, and then only use the first letter of every word
> (or the first of the first word, second of the second word...)
Or simply take the whole sentence, which is no less secure but easier to
remember and type.