Slashdot Mirror

← Back to Stories (view on slashdot.org)

Secret Repairs Preceded TCP Flaw Release

Posted by michael on from the cover-your-assets dept.

efranco cuts and pastes: "Only the math had changed. But the emergence of a workable exploit for an old TCP security hole prompted a secret initiative to fix the Internet, giving network operators a week to secure vulnerable routers. The clandestine repair effort livened an already intense period for security pros already juggling a bevy of Windows security patches." We ran a story on a this a few days ago.

1 of 204 comments (clear)

  1. Re:Cisco Fix by robslimo · · Score: 5, Interesting

    When the previous /. story was posted about the TCP flaw, I checked out the NANOG mailing list.

    There was plenty of discussion about it, including various vendor issues (Cisco and Juniper) & fixes, as well as some ISPs dragging their feet on implementing MD5 over peer links. I could tell from some of the things mentioned there that they (the network ops) had advance knowledge of the vulnerability.

    Most interesting was this about looking glasses being too free with info that would allow a TCP reset in one try.