Date: Fri, 25 May 2001 23:50:11 -0700 From: Kris Kennaway <kris@obsecurity.org> To: Alfred Perlstein <bright@rush.net> Cc: Kris Kennaway <kris@obsecurity.org>, net@FreeBSD.ORG Subject: Re: Randomized IP ID patch Message-ID: <20010525235011.A44657@xor.obsecurity.org> In-Reply-To: <20010526024644.I17514@superconductor.rush.net>; from bright@rush.net on Sat, May 26, 2001 at 02:46:44AM -0400 References: <20010525233811.A44455@xor.obsecurity.org> <20010526024644.I17514@superconductor.rush.net>
next in thread | previous in thread | raw e-mail | index | archive | help
--KsGdsel6WgEHnImy Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, May 26, 2001 at 02:46:44AM -0400, Alfred Perlstein wrote: > * Kris Kennaway <kris@obsecurity.org> [010526 02:38] wrote: > > A while back I posted a version of this which was activated by sysctl, > > but people didn't like the per-packet performance overhead, so here's > > an updated version which uses a compile-time option. Please review; > > I'd like to commit this soon. > > >=20 > This seems pretty cool, I'm suprised you had people objecting to > a single check of whether or not to run an external function. > (I'd rather see this configurable while the system is running). Well, I could have done it by switching functions, but people also objected to the kernel bloat. To be fair, this is a pretty minor information leak, so many people will not care about it. Kris --KsGdsel6WgEHnImy Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.5 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE7D1IiWry0BWjoQKURAmt8AJ4kTf/Q5SWwaoWammCeS8hTVRPVEgCg440o cNn15qyyC1cIyV5iW08PV48= =LVbd -----END PGP SIGNATURE----- --KsGdsel6WgEHnImy-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010525235011.A44657>