TL;DR of Ars: Connectionless LDAP Actual article that Ars writes about: https://blog.lumen.com/cldap-reflectors-on-the-rise-despite-best-practice/ https://blog

TL;DR of Ars: Connectionless LDAP Actual article that Ars writes about: https://blog.lumen.com/cldap-reflectors-on-the-rise-despite-best-practice/ https://blog.lumen.com/cldap-reflectors-on-the-rise-despite-... Actual news (less vague title than Ars'): the number of vulnerable systems has increased ("from the 7K range to over 12K" "over the last 12 months"). Only 15% stays online longer than a year, though, so it seems that most admins catch on after a while. "[T]he Connectionless Lightweight Directory Access Protocol (CLDAP) [has a] Bandwidth Amplification Factor (BAF) of 56 to 70x". Actionable advice for Windows Server owners is provided at the bottom of both articles. --- > [heading] A never-ending arms race Are there still protocols newly put into production that do not take reflection attacks into account? In my experience, it's all legacy. And don't more and more ISPs enforce BCP38 (http://bcp38.info http://bcp38.info)? Not sure this headline of Ars' is true.