4 ms·
Wait, they only made this attack 2000 times harder? That was the whole fix?
by Felz 5y ago
Wait, they only made this attack 2000 times harder? That was the whole fix?
- davidu 5y agoAdditional mitigations started to come in to play after that to make it both impractical, detectable, and improbable. It's just shy of impossible now, and in the very unusual scenarios where it's possible, it's so easily detectable.
- mike_d 5y agoDan's work pushed the adoption of BCP38, segmentation of authoritative and recursive resolvers, and better source port randomization. Entirely new mitigations were developed like 0x20, source address randomization, and double response detection.