2004-04-22 15:31
by Vasil KolevI know, I know, I haven’t blogged in the last few days, and a lot of people complained :)
To begin, if someone didn’t hear – there’s a big hole in the internet, a great problem, beware, the bad people will eat us all! Some people described the problem, that you can reset a TCP connection, if you’re able to send a RST or SYN packet, which to fit in the receive window of the connection, something, that’s known at least since the implementation of the first TCP/IP stack, and just because a lot of routers use 16 bit receive windows, it takes (theoretically, without thinking, and in the bad implementation) one connection resettable with 2^16 packets, which could led to problems. The thing that everyone talks about is BGP sessions.
So, for networks, which don’t have the proper filtering, haven’t implemented MD5 signing of the packets for the BGP sessions (which could be a bigger problem, that leads to DoS in a lot of Cisco routers), (or just the looking glass shows to everyone the TCP sequence numbers), this is a problem. But a 20 year old problem doesn’t deserve the damn idiotic attention, i think.
I still haven’t moved, because there isn’t a inet connection at the new place, but I’m working on it, and I hope that the next week I’ll find a way to do it :)
I’m working on my lecture for the Linux seminar in Stara Zagora, I already sent a plan to the list, and I think that I’ll make in into a paper, and I’ll put it on my site, to give it to other people to read – the problems that I’m about to talk about, are really serious, and looks like they’re not just local for us, judging by
this and this articles in theregister.co.uk.
The Network Security course is going well, today we’ll be digging deep in some architectures, to see how much we will confuse the students. We’re thinking about one more course for the next year, as a continuation to NS2, but because it’s still not sure, I won’t talk about it (I’ll just leak that it’s temporary name in the moment is “(fighting) cyberterrorism)”, which in out opinion sound stupid :) ).
My mother is visiting again, and tonight she made the observation (because my machine is in my room, and she’s sleeping on another bed here), that my keyboard was too noisy… People don’t appreciate the IBM Model M… :)
Only offspring can have a song ‘Da Hui’ (translation: hui == penis/dick/cock in bulgarian), the lyrics sound really funny to me, you can find them in google :)