Security Auditing and Administration of Corporate Networks 
  • About Us
  • Networking
  • Services
  • Blog
  • Internet Goes on Strike
#Brute Force Attack and Countermeasures 01/03/2012
0 Comments
 

Brute Force Attack


A brute force attack scenario, whether generic or specific, consists of hackers exhaustively attempting to compromise every security policy of a secret being protected. Specially the service that ensures a correct password is "forced" to grant access to a network terminal. The attacker tries to authenticate with the victim terminal computer with username lists and random passwords. A successful hack means that a specific victim computer of that network itself is compromised. No method can counter such a hack, and all applications protected by the hacked terminal are at threat. 



Counterattack 
 
A brute force attack can be delayed if the algorithm data is large enough, i.e. cracking all combinations becomes virtually impossible without super-computers. In order to protect the security of a terminal computer, the computer should have a secure kernel and communication channel that allows storing a cryptographic key. Like an IPSec Policy or VNP Encryption via LAN or WiFi.

* Require that passwords must be at least six characters long, may not contain a username or any part of a full name, and must contain characters from at least three of the following: *


                                                       

                                                         English uppercase letters (A, B, C,...Z) 

                                                         English lowercase letters (a, b, c,...z) 

                                                         Westernized Arabic numerals (0, 1, 2,...9) 

                                                         Non-alphanumeric “metacharacters” (@, #, !, &, and so on.)



These are also the same characters used by the attacker to force the right password.

This method will only increase the time that hackers would need to spend to crack the password. Other more complex methods are available to mitigate this attack.

Neteco provides these and many other services here..!


Here is a video that shows one of these attacks.

Add Comment
 
#E-mail Rate Limits & Restrictions for Common Webmail Accounts. 12/28/2011
0 Comments
 

*Google Gmail Email Send Rate Limit & Restrictions


The following restrictions apply when sending emails from a Google Gmail account:

Gmail email send limit - no more than 500 recipients per message for the Gmail web interface, or max 100 recipients if you are using an email client software.

Gmail other SMTP limits - outgoing messages sent via Google Gmail can not exceed 10Mb per email (including attachments)

GoogleMail Policy - http://www.google.com/mail/help/programpolicies.html

GoogleMail SMTP restriction expiry method - the restriction is automatically removed within 24 hours after the limit was reached.



*MSN Hotmail Email Send Rate Limit & Restrictions

The following restrictions apply when sending emails from a Hotmail account:

Hotmail email send limit - no more than 100 recipients per day_

Hotmail other SMTP limits - outgoing messages sent via Hotmail can not exceed 10Mb per email (including attachments)




*Yahoo Mail - Email Send Rate Limits & Other Email Restrictions

The following restrictions apply when sending emails from a Yahoo Mail account:

Yahoo Mail email send limit - no more than 100 emails or recipients per hour

Yahoo Mail other SMTP limits - max 10Mb per message for the free Yahoo Mail Service, or 20Mb per message for Yahoo! Mail Plus

Yahoo! Anti-Spam Policy - http://docs.yahoo.com/info/guidelines/spam.html

Yahoo Mail SMTP restriction expiry method - N/A




*Lycos Mail - Email Send Limits & Restrictions

The following restrictions apply when sending emails from a Lycos Mail account:

Lycos Mail email send limit - max 25 recipients per message and max 250 emails per day

Lycos Mail other SMTP limits - Lycos Mail does not have a limit to the attachment file size at this time.

Lycos Email Policy - http://info.lycos.com/legal/mailterms.html




*AOL Email Send (Rate) Limits

AOL imposes a rate limit on an AOL member when a member exceeds the acceptable number of email messages sent in a given time period. The following restrictions apply when sending emails from an AOL connection:

AOL email send limit - no more than 100 recipients per message or 500 recipients per connection

AOL other SMTP limits - max 16mb per message

AOL email-outbound policy - http://postmaster-us.info.aol.com

AOL SMTP restriction expiry method - N/A




Add Comment
 
#This is the First Post! 12/28/2011
 
Hi everybody, this is the first post...!   

Hope you had a Merry Christmas and we wish you a happy and productive 2012 !

Hope to see you around...!
 

    Neteco

    Corporate Network Administration, Security Consulting and Auditing.

    Archives

    January 2012
    December 2011

    Categories

    All
    Attack Vectors
    Blog Series
    Mailings

    RSS Feed