netdev - Re: updates to syncookies - timestamps not needed any more (freebsd)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAFLxGvzihGSgNZ5NOJxMN2pgQiCPXgJSRjVCcj3Ncfw3oe_YLA@mail.gmail.com>
Date:	Fri, 12 Jul 2013 08:59:06 +0200
From:	richard -rw- weinberger <richard.weinberger@...il.com>
To:	David Miller <davem@...emloft.net>,
	"netdev@...r.kernel.org" <netdev@...r.kernel.org>
Subject: Re: updates to syncookies - timestamps not needed any more (freebsd)

On Fri, Jul 12, 2013 at 3:41 AM, Hannes Frederic Sowa
<hannes@...essinduktion.org> wrote:
> On Thu, Jul 11, 2013 at 04:57:26PM -0700, David Miller wrote:
>> From: Hannes Frederic Sowa <hannes@...essinduktion.org>
>> Date: Mon, 8 Jul 2013 18:04:21 +0200
>>
>> > Interesting patch by Andre Opperann of FreeBSD:
>> > <http://lists.freebsd.org/pipermail/freebsd-net/2013-July/035999.html>
>>
>> Interesting work, but outside of the change of hash function I'm not so
>> sure.  The whole reason we went to the timestamp field was to eliminate
>> the coarse tables.
>>
>> I understand that he claims that %99.99 of connections are handled by
>> the values he has chosen, but this is still a step backwards in my
>> opinion.
>
> If I understood this thread[0] correctly, it seems Windows 8 might not
> enable TCP timestamps by default? I can not verify, I currently have
> no Windows installations near me. That would mean, linux does, too,
> fall back to an unscaled window connection as soon as syncookies kick in
> (but we would not end up with an unsynchronized window scale option).

My Windows 8 workstations here have it disabled by default.

--
Thanks,
//richard
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html