I don't know how well these people know TCP, but the results they report aren't possible as far as I can see. If the NetBIOS ports report closed on a connect scan (i.e send a reset in response to the SYN, or a reset to the first ACK), they cannot be "stealthed" against a syn-only scan, since they would get the reset there too.
Slashdot Mirror
I saw this bit last week- It may explain part of this:
http://www.duncansteel.com/archives/996
He bought tickets for the entire IT team, and it is an official company outing.
http://www.weizmann.ac.il/ESER/People/Karni/resear ch.html has some information about it.
I don't know how well these people know TCP, but the results they report aren't possible as far as I can see. If the NetBIOS ports report closed on a connect scan (i.e send a reset in response to the SYN, or a reset to the first ACK), they cannot be "stealthed" against a syn-only scan, since they would get the reset there too.
If it helps anything, a reverse lookup shows:
Barnes, Craig
1535 S Dorrance St
Philadelphia, PA 19146-4625
(215) 468-2929
http://wuphys.wustl.edu/~katz/scientist.html also discusses this topic.
It is the March 7th, 2000 comic if anybody looks.
One of the 60GXP drives that I own failed after 2 weeks, and is currently being RMAed. I hope I don't need to do it again!