full-disclosure - Reverse engineering the Windows TCP stack

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <F2976F1FBBB859489AC1214F93EBC2100195EB@mail1.networkengines.com>
Date: Tue Mar 29 18:02:07 2005
From: Kyle.Quest at networkengines.com (Kyle Quest)
Subject: Reverse engineering the Windows TCP stack

It seems that there's some bsd code reused in microsoft
network utilities and their socket API implementation
(a number of previous emails demonstrated that). However,
the TCP/IP stack itself(tcpip.sys, ipsec.sys, etc) 
is a totally different beast. There are a lot of architectural
differences between MS and BSD TCP/IP stacks. At most MS
reused some of the high level concepts and algorithms 
with possible tiny bits and pieces of BSD support 
routines (e.g., checksums, hashing,). This is why
Windows (2k or XP) doesn't behave exactly the same as BSD. 
I base my statements on prior work I've done with NetBSD, 
FreeBSD, OpenBSD, Linux, and Windows TCP/IP stacks. 
I had to partially RE the stack windows has. Fortunately, 
the source code for other stacks was available, 
which made things much easier.

Kyle

-----Original Message-----
From: Georgi Guninski [mailto:guninski@...inski.com]
Sent: Tuesday, March 29, 2005 2:03 AM
To: James Longstreet
Cc: Tim; full-disclosure@...ts.grok.org.uk; Kyle Quest;
serinus-canaria@...tinelchicken.org
Subject: Re: [Full-disclosure] Reverse engineering the Windows TCP stack

On Fri, Mar 25, 2005 at 12:18:04AM -0600, James Longstreet wrote:
> I don't know if it's credit per se, but I just ran strings on XP's
> finger.exe:
> 
> > <snip>
> > s_perror
> > MSWSOCK.dll
> > @(#) Copyright (c) 1980 The Regents of the University of California.
> >  All rights reserved.
> 
> I've done it with ftp.exe and a few others as well, I'd imagine most of
> those utilities were borrowed from BSD.

http://64.233.183.104/search?q=cache:-UWnNbtDLhoJ:www.smh.com.au/articles/2002/04/20/1019233287416.html+gates+gpl+cancer&hl=en
Steve Ballmer, told a reporter that a competing "open-source" system called
Linux was "a cancer that attaches itself in an intellectual-property sense to
everything it touches".

but obviously not all free software is bad.
reusing bsd code is good thing according to m$.

-- 
where do you want bill gates to go today?