Slashdot Mirror
Examining ICMP Flaws
An anonymous reader writes "A recent internet-draft pointed out a number of security flaws in the design of the ICMP protocol. Most open source projects and vendors have addressed the flaws to some level, but this interesting article on KernelTrap examines the true extent of the problem, and how so far only OpenBSD has implemented all possible counter-measures. Theo de Raadt is quoted saying, "here we have a 20 year old protocol, a part of the Internet infrastructure that hasn't been touched in 10 years and we were all sure was right, and now is cast in doubt.""
"here we have a 20 year old protocol, a part of the Internet infrastructure that hasn't been touched in 10 years and we were all sure was right, and now is cast in doubt."
r /article.php/3498286 9 30259&tid=172&tid=7
Where the hell has this moron been?
http://www.enterprisenetworkingplanet.com/netsecu
http://www.ciac.org/ciac/bulletins/h-78.shtml
http://bsd.slashdot.org/article.pl?sid=04/08/28/1
etc., etc., etc...