3 ms·
My first thought on seeing that is it would be great for a DNS amplification attack. Not sure the value as an advertisement though...
by EricBurnett 13y ago
My first thought on seeing that is it would be great for a DNS amplification attack. Not sure the value as an advertisement though...
- dijit 13y agoI think it's too big for UDP, it'll renegotiate TCP for anything over a certain size. thus DNS amplification is impossible because spoofing the TCP source would fail a handshake.
- dice 13y agoThe size is 1876 bytes, DNS servers which support EDNS will do up to 4096 byte replies in UDP.
- djcornell 13y agoagreed, this is a bad idea and is likely to be abused shortly