Re: [cobalt-users] wish to Cobalt: suppressing "sensitive" information

[Jeff Bilicki <jeff@xxxxxxxxxxx>]

> I agree, its NOT a good idea.  But neither is running software with an
> exploit available.  Patching the the software is the solution.  Also, there
> are many ways of fingerprinting a system, software, etc. not just based upon
> those messages.

The biggest argument for this is not whether or not 
it is a Cobalt system because Cobalt's port 81/444 admin 
server is a dead giveaway.  But whether or not the box is 
x86 or mips, since most remote root sploits use shell code.  If 
someone is smashing the stack and using the wrong shell code
they are going nowhere fast, and it might leave some
funk behind to aid in detection. 

Jeff-