Re: NYT Article this morning

• Messages sorted by: [ date ][ thread ][ subject ][ author ]
• Next message: Christopher Klaus: "Re: address spoof/no return packets"
• Previous message: Mark Crother: "CIAC Advisory F-08: IP Address Spoofing and Hijacked Session Attacks (fwd)"
• Next in thread: Valdis.Kletnieks@vt.edu: "Re: NYT Article this morning"

> To fully fix the problem will require all the vendors to come out with
> kernel patches to make the TCP sequence numbering difficult to guess, then
> have all the admins apply those patches to all the machines on Internet, 
> and then we will have solved the problem.  (While we are at it, have 
> admins install patches that stop get-root scripts also).  Pretty simple and 
> quick to implement.  <grin>

  I don't have access to the source for the appropriate modules, but it
seems to me that this is a relatively simple change. What am I missing?

-David

• Next message: Christopher Klaus: "Re: address spoof/no return packets"
• Previous message: Mark Crother: "CIAC Advisory F-08: IP Address Spoofing and Hijacked Session Attacks (fwd)"
• Next in thread: Valdis.Kletnieks@vt.edu: "Re: NYT Article this morning"