Slashdot Mirror


TCP Vulnerability Published

Bob Slidell writes "According to Yahoo!, there is a critical flaw in TCP that affects everyone and everything. The article is scant on details and long on fear, hopefully someone will post more details on this." The advisory has more information, and is long on details but only moderate on fear.

35 of 676 comments (clear)

  1. Best security advice... by Anonymous Coward · · Score: 4, Funny

    Just unplug your PC from the internet and wash your hands of it.. the whole thing feels holier than swiss cheese :(

    1. Re:Best security advice... by kasperd · · Score: 5, Funny

      Just unplug your PC from the internet

      How would that keep you safe from DoS attacks?

      --

      Do you care about the security of your wireless mouse?
    2. Re:Best security advice... by nate1138 · · Score: 4, Funny

      Why would anyone put a computer running DOS on the internet in the first place?

      --
      Where's my lobbyist? Right here.
  2. Good by rokzy · · Score: 4, Funny

    let's all just start again

    TCP2
    SMTP2
    POP32 ...

  3. That's it! by Anonymous Coward · · Score: 5, Funny

    I'm removing support for TCP right now. Give me UDP or give me death!

    1. Re:That's it! by dasmegabyte · · Score: 4, Funny

      And what's ICMP, chopped liver?

      I want a new internet based on morse code ping responses... 10 ms for a dah.

      --
      Hey freaks: now you're ju
    2. Re:That's it! by discogravy · · Score: 4, Funny

      i think he meant ICMP when he said "...or give me death".

    3. Re:That's it! by Quixadhal · · Score: 5, Funny

      Connected to Internet

      OSVDB ID: 4030
      Rating: TBD
      Disclosure Date: Apr 20, 2004

      Description:

      The Internet has been determined to be full of evil hax0rz. Any computers connected to the Internet are deemed vulnerable to this exploit.

      Solution:

      Unplug cable, power down WAP, close bomb shelter doors.

  4. oops? by Tebriel · · Score: 5, Funny

    Looks like someone left ISEXPLOITABLEFLAG = TRUE in the code.

    --
    The Blaster Master Fighting for Truth, Justice, and Evil Pie since 1979
  5. No problem by niom · · Score: 4, Funny

    I'll just switch to UDP.

    --
    -- Repeat with me: "There is no right to profits".
    1. Re:No problem by TheTomcat · · Score: 5, Funny

      more like:
      UDP just I. switch ll'll to I just

      S

  6. Work by somethinghollow · · Score: 5, Funny

    As a web designer, taking advantage of this could get me off work faster than a snow storm. I don't know if I'm afraid or enthused. ;)

  7. Re:OpenBSD is safe? by Anonymous Coward · · Score: 5, Funny

    What about proactive spelling auditing?

  8. The time has come by MrRuslan · · Score: 5, Funny

    to switch over to IPX

  9. Re:OpenBSD is safe? by shatfield · · Score: 5, Funny

    Great, I guess Microsoft will just have to copy the BSD TCP/IP code again to ensure that their customers are safe ;-)

    --
    "To make a mistake is only human; to persist in a mistake is idiotic." Cicero
  10. Re:OpenBSD is safe? by GoofyBoy · · Score: 4, Funny

    >For what
    they discuss, OpenBSD handles this extremely well. We'll explain more in a week or so.

    Is the margin of the page too small to explain the wonderful reason why it handles this so well?

    --
    The surprise isn't how often we make bad choices; the surprise is how seldom they defeat us.
  11. Warning! by Disconnect · · Score: 5, Funny

    Your computer is broadcasting an IP address!

    Seriously though, it doesn't look all that bad. (Nor does it look all that hard to do, but still..)

    --
    www.gotontheinter.net
    Updated vaguely once a whenever, maybe once a whenever-and-a-half.
  12. No problem... by dark-br · · Score: 4, Funny

    i'm posting this over NetBEUI Protocol ;)

    *sight*

  13. Re:OpenBSD is safe? by Anonymous Coward · · Score: 5, Funny

    It doesn't save anything. When someone exploits this and takes out 90% of the Internet's routers, you're screwed no matter what.

    But it saves the day for my network of 3 linux boxen in my basement which are s0 K3wl, they r0x! While the Internet burns to the ground I can route packets back and forth with impunity between my 486 laptop and my Pentium II Server!! WooHoo!

  14. yoda? by DamienMcKenna · · Score: 4, Funny

    Is that you master?

    L. Skywalker

  15. Windows also safe by MrHanky · · Score: 5, Funny
    In a press release from Microsoft, Bill Gates states:
    All Windows versions from 3.11 to 2003 are quite safe from this exploit, since Windows also supports the famously reliable NetBEUI protocol. In a proactive measure, Windows update will remove support for TCP/IP and ensure that all updated computers have support for NetBEUI only. NetBEUI will once again rule the earth! Take that, Steve! No, not you, Ballmer, the other Steve. The hippe. Woahahahahahaha!

    In a quickly following press release, Bill Gates adds:
    Woahahahahahaha! Hahahaha! Hahaha! Thank you.
    1. Re:Windows also safe by MrHanky · · Score: 4, Funny

      Ah, come on! I was joking, not trolling for flames. And besides, how the hell was that going to attract flames? If that really was flamebait, it should be modded -1, ineffective.

      (Was it the hippie part? Yeah, sure calling Steve Jobs a hippie is flamebait, but this was also clearly a joke. Some moderators are just in a dire need of a blow job.)

    2. Re:Windows also safe by markan18 · · Score: 5, Funny

      Security Update for Windows XP (KBTCPDRM-666)

      This update addresses the vulnerability addressed in Microsoft Security Bulletin 666. Find out about more recent critical updates in the Overview section.

      File Name:

      WindowsXP-MSTCPDRM-x86-ENU.exe

      Download Size:

      1261 GB

      Date Published:

      4/20/2004

      Version:

      666

      Overview

      This patch fixes criticals security vulnerabilities present in Windows TCP stack.
      This patch also add the new DRM TCP extension.
      When is patch is applied, your computer will connect to drm.microsoft.com prior establishing any other connection to make sure the requested end point is an authorized Microsoft partner. All rogue packets are now rejected and reported by the Windows TCP-DRM firewall (TM).
      This patch also upload the registry key HKEY_LOCAL_MACHINE and all subkeys and values to drm.microsoft.com so we can make sure all software is used according to their end user licence agreements.

      System Requirements

      Supported Operating Systems: Windows XP

      Windows XP Professional
      Windows XP Home Edition

    3. Re:Windows also safe by Cruciform · · Score: 5, Funny

      Some moderators are just in a dire need of a blow job.

      Nice of you to volunteer, looks like their outlook has improved already :)

  16. SCREECH *BAM* *poof* by MachineShedFred · · Score: 4, Funny

    Wow. That uninterrupted block of text hit so hard it set off my browser's airbag!

    --
    Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
  17. Does the affect tcpip/cp? by Craptastic+Weasel · · Score: 5, Funny

    I am a lonely man living on the Galapagos Island. I use TCP/IP over carrier pigeon to communicate with a Nigerian who has promised my great wealth in exchange for securing funds in the First Galapagos Bank, of which I am owner/ceo/clerk, and janitor.

    I suspect someone is interupting my data stream and keeping the replies and account numbers he has been sending me in regards to my money. This vulnerability proves my theory. I am in desperate need!! How can I prevent this!!

    Anyone willing to help I will share my wealth with.

    /obscure humor (Does this make me a Galapagos Spammer?)

  18. Re:OpenBSD is safe? by hatrisc · · Score: 4, Funny

    LONG LIVE THE INTRANET!

    --
    I write code.
  19. Re:OpenBSD is safe? by pyros · · Score: 5, Funny

    I guess they were smart enough to implement the new Evil Bit added to TCP last April. Those OpenBSD folks sure are forward thinking.

  20. Re:NISCC slowing, here is the summary of article by JPriest · · Score: 5, Funny
    BTW, I pasted this here mostly as damage control. I know how some people (and yahoo apparently) like to fly off the handle and claim the world is ending without bothering to even RTFA. You wonder why some people are Afraid to use a computer. If I wrote for the auto industry and intentionally tried to scare the shit out of people Detroit would sue me off the map.

    There is a new vulnerability that will cause every GM vehicle and cause your children to cry. Vandals can place 1 domestic house cat into the fan and cause the fan to stop and under some cases, cause the vehicle to overheat. This was previously written off as house cats are usually soft ans squishy and have little effect on the powerful fan but Joe Shmoe PHD realised that many house cats have colars that are pretty tough for the fan to digest. Car experts say this is a serious problem and will be dealt with in a serious manner. Suggested work around is to keep your cat tied in the house, and to drive a bicycle instead.

    --
    Saying Java is nice because it works on all OS's is like saying that anal sex is nice because it works on all genders.
  21. Re:BGP vulnerable by MyHair · · Score: 4, Funny

    We were embargoed by DHS to not release the information until tomorrow.

    And if anybody could determine the identity of an Anonymous Coward, it certainly wouldn't be an inside group of hardened NOC geeks.

    Oh wait...

    Good info, though. Thanks.

  22. Re:OpenBSD is safe? by rbgaynor · · Score: 4, Funny

    ...in my basement...

    err um, don't you mean your parent's basement :)

    --
    "Good things don't end with eum, they end with mania or teria." - H. Simpson
  23. Re:More from Theo (was Re:OpenBSD is safe?) by c_ollier · · Score: 5, Funny

    For us, those issues are 1/50000 smaller than they are for other vendors.


    So, they are 50,000 times bigger ?


  24. Re:NISCC slowing, here is the summary of article by wideBlueSkies · · Score: 5, Funny

    Besides the fact that their little kitty bones could get into the works and actually stop the fan.

    I'd say this is a real threat. We need to protect our SUV's from the mobs of 1337 haxor kitten terrorists! I propose bombing __insert country here__, under the guise of giving them democracy and freedom, and simultaniously pass some laws at home which take away some of our freedom.

    --
    Huh?
  25. Re:NISCC slowing, here is the summary of article by jcenters · · Score: 5, Funny

    Suicide terrorist kitties?

    Al-Kitty?

    Yes, that was corny, and no, I couldn't resist.

    --

    vi ~/.emacs

  26. Re:NISCC slowing, here is the summary of article by Guppy06 · · Score: 4, Funny

    "Al-Kitty?"

    You're not mangling your Arabic-to-English transilteration enough. It would probably look more like "al Qiddy"