http://emergentchaos.com/archives/2008/07/massive-coordinated-vendor-patch-for-dns.html The Emergent Chaos Jazz Combo Wed, 01 Feb 2012 19:20:40 +0000 hourly 1 http://wordpress.org/?v=3.3.1 http://emergentchaos.com/archives/2008/07/massive-coordinated-vendor-patch-for-dns.html/comment-page-1#comment-4861 Chris Wed, 09 Jul 2008 10:09:04 +0000 http://emergentchaos.com/?p=2826#comment-4861 The thing that I found interesting was that djb <a href="http://cr.yp.to/djbdns/forgery-cost.txt" rel="nofollow">wrote about XID not cutting it</a> back in 2001, in one of those eerily prescient writings one occasionally comes across. Of course, I do not know the details of this vuln, but by all reports source port randomization (or lack thereof) is involved. The thing that I found interesting was that djb wrote about XID not cutting it back in 2001, in one of those eerily prescient writings one occasionally comes across. Of course, I do not know the details of this vuln, but by all reports source port randomization (or lack thereof) is involved.

]]> http://emergentchaos.com/archives/2008/07/massive-coordinated-vendor-patch-for-dns.html/comment-page-1#comment-4860 Nathaniel H. Tue, 08 Jul 2008 15:03:45 +0000 http://emergentchaos.com/?p=2826#comment-4860 Dan always seems to do very interesting work with DNS. I remember summarizing the talk he gave at LISA '06 for ;login: magazine. It was fascinating stuff. I think his talk is what really got me fired up about security research. Dan always seems to do very interesting work with DNS. I remember summarizing the talk he gave at LISA ’06 for ;login: magazine. It was fascinating stuff. I think his talk is what really got me fired up about security research.

]]>