full-disclosure - Re: Re DNS spoofing issue discussion

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <48928AB8.805@gmail.com>
Date: Thu, 31 Jul 2008 22:02:00 -0600
From: don bailey <don.bailey@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Re DNS spoofing issue discussion

> Apples and oranges.  *Attacks* will never go away, but dnssec, if fully 
> implemented, would render Dan's attack moot.  Unless you've factored 256 
> bit RSA keys, in which case you should be making six figures.
> 

Maybe I wasn't being clear, Mr. Paul Schmehl. The static port
vulnerability allows for the effective attack against the xid
name space. So, there are really two attacks here. One is based
on the fact that there are static ports, the other is based on
the small number of bits used. Two problems. Compounded together.
Into one attack.

If there was a weakness in a particular implementation of DNSSEC
that was made more feasible by the fact that people still used
static ports, we would still be having a large hullabaloo about
"attack, attack!!!".

So, Mr. Paul Schmehl, it is not "apples and oranges". It is simply
a different way of thinking.

And how do you know I don't already make six figures? Don't you
have a Red Hat image to install on a workstation somewhere?

D

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/