explain
Then there are all the ways an employee can inadvertently or intentionally make its existence public.
https://www.google.com.au/search?q=discovering+internal+web+...
Leading to gems like this:
https://www.verisgroup.com/2014/07/15/internal-web-applicati...
And this:
https://books.google.com.au/books?id=lXr0AgAAQBAJ&pg=PA429&l...
Or even this:
http://www.pentest-standard.org/index.php/Intelligence_Gathe...
Data on the network cannot be altered.
False, if something goes through another device, it can be altered. Important because, well, man in the middle. Encrypted data on the network cannot be altered.
Same as the above. Harder, but still doable Data cannot be accidentally corrupted, because TCP has checksums and Ethernet has CRCs
This is about like saying "only 1 bit can be flipped at once, so parity checking will always catch it" If it's inside my perimeter firewall, that means I have total control over it (@armorguy)
Similar to the top ones, still harder, but it's a weak point if someone gets into your perimeter at all. Packets arrive in the order in which they were sent.
Completely false, though TCP will reorder them back to the original order for you. If you can't ping the target, then it doesn't exist. (@jjarmoc)
Trivial to make a host not respond to pings If you can ping the target, then it does exist.
Again, trivial to make a router or any device respond to pings for a lot of IPs TCP RSTs come from end-nodes.
Devices in the middle sending RSTs is really common, google "comcast rst packets" Bytes must be "swapped" from the network byte-order to the host CPU byte-order.
IP/TCP and such protocol bytes must be swapped. The only thing that cares at the application layer is the application code, it can just say "everything is little endian" and be done with it. It's an internal web app -- outsiders won't be able to discover where it is (@biosshadow)
if this is about a "exposed under an obscure name", the tools like fierce can probe for it. If it's exposed to the internet at all, consider it under attack at all times. The DHCP address will be the same after a reboot (@shewfig)
Not necessarily true, depends on the DHCP server and such. The DHCP address will remain the same until the next reboot.
You get a lease time, OBSERVE IT. Don't just keep using it cause you say "this is mine still!" Well, it'll last a long time between changes
One culprit is coffeeshops, there have been reports of coffeeshops with 30 minute lease times. I've seen cable modems hand out 30 second leases, but that was when it was still trying to connect to the cable side, so it wanted the computer to keep checking back The DHCP server and local router are the same (@schrotthaufen)
Not at all a requirement, and would cause your packets to go off into nowhere if you tried to rely on it.And of course even that's only true within a single connection.
True, but...
> it can just say "everything is little endian" and be done with it.
... doesn't quite follow. If you're blitting integers directly, your code will break on either a big- or little-endian boxes. Better to pick a standard encoding and always serialize/deserialize properly whatever that means. That standard encoding may be little-endian (maybe better than big-endian - such systems are overwhelmingly more common on the desktop/server) or may be some packed representation. But ideally you could change the representation without changing application code other than the serialization/deserialization itself (which may well live in a library).
>> It's an internal web app -- outsiders won't be able to discover where it is (@biosshadow)
>if this is about a "exposed under an obscure name", the tools like fierce can probe for it. If it's exposed to the internet at all, consider it under attack at all times.