5 ms·
Perhaps what's new is that it is so easily exploitable? I remember when 32 bits seemed huuuge, and now … not so much.
by wtbob 11y ago
Perhaps what's new is that it is so easily exploitable?
I remember when 32 bits seemed huuuge, and now … not so much.
- armitron 11y agoNo it's not, the author "failed" to mention that the vast majority of networks drop spoofed packets. It may be exploitable inside a target network, locally, but one usually has a lot better options if he has a foothold there, than bruteforcing sequence numbers with gigabytes of traffic for a single connection. It's dumb is what it is.
- laumars 11y ago> It's dumb is what it is. Steady on there. The author has clearly done a lot of work on this and while your points are valid, that this method of attack isn't new nor practical, he has still learned a very genuine potential vector for attack. Thus it deserves a mature discussion since there will certainly be others who might learn from the author's research. I'm all for constructive criticisms, but calling his article "dumb" is just unnecessary language. It doesn't contribute anything and yet could discourage authors from publishing future work.
- samfpetersen 11y agoSOP for this site: 1. Read content 2. Think of a reason to disparage it 3. Disparage it in a comment 4. Suck own dick
- jessaustin 11y agoOuch it won't reach my mouth; If I could do it myself I'd probably never leave the house.
- pg_is_a_butt 11y agoi'm all for constructive criticisms, but calling his calling of the article "dumb" as "unnecessary language" doesn't contribute anything. your ignorant hypocrisy is dumb.
- jacquesm 11y agoAnti-spoof measures are really only effective close to the edge, further in packets are routed with abandon because of overhead and difficulty in verifying the origin.
- fulafel 11y agoCounting on the attacker's own network to have egress filtering stopping his attacks, isn't that a bit like discounting spam because most networks filter outbound SMTP? If your defenses are predicated on the assumption that you aren't going to encounter bad stuff due to filtering at the source, you are in for a bad time.