[?] DYNDNS host vulnerability



Hello all,

it's convenient to use a DYNDNS domain name like myhost.dyndns.org.
I guess, though, that the host myhost.dyndns.org would be much
more vulnerable as for crackers there is no need to watch out
for a dynamic IP that changes every day (at least in Germany).

Background: Every now and then I do some administration on a
server of a friend via

name@xxxxxxxxxxx

It would be nice to do this instead via

name@xxxxxxxxxxxxxxxxxxxxxxx

so there would be no need to let me know which dynamic IP his
router currently uses. This is what DYNDNS is supposed to do.
Nevertheless, if a cracker tries to crack into a host, he
would be happy not to care for dynamic IPs. Rather he would
be happy to rework on "friends_host.dyndns.org" without
caring for IP changes.

Am I correct or did I miss something?

If I were correct, weak login names and passwords would
be no problem, even with ssh - right?

Thanks and regards,
Frank
.



Relevant Pages

  • Re: [?] DYNDNS host vulnerability
    ... it's convenient to use a DYNDNS domain name like myhost.dyndns.org. ... I guess, though, that the host myhost.dyndns.org would be much ... more vulnerable as for crackers there is no need to watch out ... I guess, many systems worldwide are wide, wide open in this respect.... ...
    (comp.os.linux.networking)
  • Re: [?] DYNDNS host vulnerability
    ... it's convenient to use a DYNDNS domain name like myhost.dyndns.org. ... I guess, though, that the host myhost.dyndns.org would be much ... available from my ISP it appears that the IP address is linked to my ... and again it may be better to only run the ssh daemon when you need ...
    (comp.os.linux.networking)
  • Re: Ive been hacked...tips for a postmortem?
    ... Reboot the affected host... ... Analyze the sniff logs. ... Contact the network admins of the networks from whence he enters ... Crackers get really pissed when you take their toys. ...
    (comp.os.linux.security)