lkml.org 
[lkml]   [2005]   [Jan]   [29]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    SubjectRe: [PATCH] OpenBSD Networking-related randomization port
    Date
    * Lorenzo Hernández García-Hierro:

    > As it's impact is minimal (in performance and development/maintenance
    > terms), I recommend to merge it, as it gives a basic prevention for the
    > so-called system fingerprinting (which is used most by "kids" to know
    > how old and insecure could be a target system, many time used as the
    > first, even only-one, data to decide if attack or not the target host)
    > among other things.

    The most important result of such a patch is source port randomization
    for DNS queries to resolvers. This gives you a few more bits (DNS
    itself has just a 16 bit "unique" ID, which isn't too hard to
    brute-force these days, unfortunately).
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 14:10    [W:0.018 / U:64.152 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site