[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: suggestion for JFK
> In addition, by not including the IP address in the hash
> calculation JFK
> opens itself up to a varient of Simpson's "cookie jar"
> attack.
...
> I will now stop beating this horse since I am the only person
> who thinks
> it is not dead yet.
I wasn't able to follow this thread in real time, but I think Dan has a good
point. After all, the ability to be able to trace a DoS attack back to its
source is often a more effective countermeasure than an attempt to stop it
'on the wire'.
This attack is clearly non-intuitive (it took a while for Dan to explain
it), so it is better not to leave it as an implementation detail. (speaking
as someone who has seen some very poor implementations of the original
Karn-Simpson cookies...)
Andrew
-------------------------------------------
There are no rules, only regulations. Luckily,
history has shown that with time, hard work,
and lots of love, anyone can be a technocrat.
References: