3 ms·
I tried to write up a little about the ones that I know something about, here it is: Data on the network cannot be altered. False, if something goes through
by Vendan 10y ago
I tried to write up a little about the ones that I know something about, here it is:
Data on the network cannot be altered.
False, if something goes through another device, it can be altered. Important because, well, man in the middle.
Encrypted data on the network cannot be altered.
Same as the above. Harder, but still doable
Data cannot be accidentally corrupted, because TCP has checksums and Ethernet has CRCs
This is about like saying "only 1 bit can be flipped at once, so parity checking will always catch it"
If it's inside my perimeter firewall, that means I have total control over it (@armorguy)
Similar to the top ones, still harder, but it's a weak point if someone gets into your perimeter at all.
Packets arrive in the order in which they were sent.
Completely false, though TCP will reorder them back to the original order for you.
If you can't ping the target, then it doesn't exist. (@jjarmoc)
Trivial to make a host not respond to pings
If you can ping the target, then it does exist.
Again, trivial to make a router or any device respond to pings for a lot of IPs
TCP RSTs come from end-nodes.
Devices in the middle sending RSTs is really common, google "comcast rst packets"
Bytes must be "swapped" from the network byte-order to the host CPU byte-order.
IP/TCP and such protocol bytes must be swapped. The only thing that cares at the application layer is the application code, it can just say "everything is little endian" and be done with it.
It's an internal web app -- outsiders won't be able to discover where it is (@biosshadow)
if this is about a "exposed under an obscure name", the tools like fierce can probe for it. If it's exposed to the internet at all, consider it under attack at all times.
The DHCP address will be the same after a reboot (@shewfig)
Not necessarily true, depends on the DHCP server and such.
The DHCP address will remain the same until the next reboot.
You get a lease time, OBSERVE IT. Don't just keep using it cause you say "this is mine still!"
Well, it'll last a long time between changes
One culprit is coffeeshops, there have been reports of coffeeshops with 30 minute lease times. I've seen cable modems hand out 30 second leases, but that was when it was still trying to connect to the cable side, so it wanted the computer to keep checking back
The DHCP server and local router are the same (@schrotthaufen)
Not at all a requirement, and would cause your packets to go off into nowhere if you tried to rely on it.
- dllthomas 10y ago> TCP will reorder them back to the original order for you. And of course even that's only true within a single connection.
- dllthomas 10y ago> The only thing that cares at the application layer is the application code, True, but... > it can just say "everything is little endian" and be done with it. ... doesn't quite follow. If you're blitting integers directly, your code will break on either a big- or little-endian boxes. Better to pick a standard encoding and always serialize/deserialize properly whatever that means. That standard encoding may be little-endian (maybe better than big-endian - such systems are overwhelmingly more common on the desktop/server) or may be some packed representation. But ideally you could change the representation without changing application code other than the serialization/deserialization itself (which may well live in a library).
- saurik 10y agoI had taken that to read that there are programs in the wild that assume hosts are little endian and always "swap" bytes as opposed to converting between the two orders (which might be a no-op on a big endian system).
- dllthomas 10y agoYeah, that's probably the case, and quite possibly what was intended. I think my elaboration deals fine with that case too, though.
- crottypeter 10y agoAlso : Browser history is synced via 'the cloud' >> It's an internal web app -- outsiders won't be able to discover where it is (@biosshadow) >if this is about a "exposed under an obscure name", the tools like fierce can probe for it. If it's exposed to the internet at all, consider it under attack at all times.