Search:  

 
theme to black backgroundlet page decide theme
HomeFind ServiceReviewsISP NewsFAQsForumsToolsDatabaseAbout 
 
   News
newer
story category Major TCP Vulnerability Unveiled
Protocol flaw sends nations scurrying
(old news - 03:03PM Tuesday Apr 20 2004)
tags: security · trouble
Late last year, a man in Milwaukee discovered a flaw in the TCP/IP protocol that has quietly sent governments and security researchers scurrying the world over. Paul "Tony" Watson identified a method to reliably trick hardware (both PC's and routers) into terminating communications by resetting the machines remotely.

The flaw, disclosed only today by the British government, has the majority of security experts more than worried. Discussion of the announcement has reached a fevered pitch on security related mailing lists, newsgroups, and message boards.

Obviously a flaw in the core technology the Internet is founded on has sent intelligence agencies and governments running in all directions. Amit Yoran, the U.S. government's cybersecurity chief, calmly informs the Associated Press the flaw "would raise significant concern and require significant attention by the folks who run the major infrastructures of the Internet."

Apparently government agencies and several companies running important data pipelines have been quietly fortifying their systems over the past few weeks in preparation of the announcement. Watson is expected to give a more complete explanation of his analysis this coming Thursday in Vancouver.

The advisory from the NISCC is available here, and notes the Border Gateway Protocol (BGP) is potentially most affected by this vulnerability. According to the SANS Internet Storm Center, a temporary workaround to the TCP vulnerability is to enable MD5 checksums on BGP sessions so that BGP peers can authenticate each other's packets and ignore spoofed TCP resets.

The center "encourages all BGP enabled Juniper or Cisco router administrators to turn on MD5 checksums as soon as possible while testing the patch supplied by router vendors."

Additional discussion of the technical specifics of the vulnerability can be found in our Security forum.

Related:
  1. DNS Flaw Even Worse Than Predicted
  2. Thursday Evening Links
  3. Monday Morning Links
  4. Friday Evening Links
  5. Wednesday Evening Links
  6. PA Man Charged With Selling Hacked Cable Modems
  7. FoxNews.com Serving Up Infected Ads?
  8. T-Mobile Systems Hacked?
Forums » Major TCP Vulnerability Unveiled
view: topics flat text 
Post a:
page: 1 · 2

TrainBuff
The New Haven Railroad
Premium
join:2003-05-01
Buffalo, NY
clubs:

Internet Shutdown

A hacker who found the flaw could effectively shutdown or cause severe interruptions to the Internet. Scary!
permalink · 2004-04-20 15:01:18 · Reply to this
B777300

join:2002-01-02

Re: Internet Shutdown

Indeed...
permalink · 2004-04-20 15:06:40 · Reply to this
laz45

join:2002-08-01
Orlando, FL
clubs:

Re: Internet Shutdown

How can this be done, i wanna do it
permalink · 2004-04-20 15:07:53 · Reply to this

lua6
Premium
join:2002-08-15
New York, NY

Re: Internet Shutdown

You download Hacker.exe and your on your merry way... Spare me please
permalink · 2004-04-20 15:10:13 · Reply to this

ThunderCorp

join:2002-03-11
Chula Vista, CA

Re: Internet Shutdown

So the obvious question is,

What is affected? Routers only? MS Windows? UNIX variants? Everything except Macs?
permalink · 2004-04-20 20:12:20 · Reply to this

tiger72
SexaT duorP
Premium
join:2001-03-28
Saint Louis, MO
clubs:

Re: Internet Shutdown

lets read this one more time:

"Late last year, a man in Milwaukee discovered a flaw in the TCP/IP protocol"

this is not OS specific.
--
low cost public gameservers www.clanpubs.net
permalink · 2004-04-20 21:50:47 · Reply to this

chickatwork

@alaska.edu		 EVERYTHING USES TCP/IP if you're on the NET. Small LANs may not, may use appletalk or netbeui..anything longdist would be TCP/IP
permalink · 2004-04-20 22:29:36 · Reply to this

PunkGod

join:2003-02-02		 LMFAO!!!

I'm in a chat room right now that this forum I get on uses and they haven't heard of this problem till I told them about it and they don't believe its a problem at all lol.
permalink · 2004-04-21 17:02:32 · Reply to this

dddane

join:2002-01-10
Chicago, IL		 everything except macs. l o l... thats a nice fantasy for apple
permalink · 2004-04-30 13:04:58 · Reply to this
Daemon
Premium
join:2003-06-29
San Francisco, CA		 while i'm sure you're kidding, if you have to ask, you aren't talented enough to do it.
--
-Ryan
Find me in the networking and Microsoft help forums
permalink · 2004-04-20 15:10:27 · Reply to this

MightWolf

join:2002-06-17
Windsor, ON		 Actually, reading the details, it will be practically impossible to "shutdown the internet" - the attacker would need to know both end-points of all TCP connections.....
permalink · 2004-04-20 15:11:34 · Reply to this
LoungeLizard2

join:2003-11-21
Vallejo, CA

Re: Internet Shutdown

Wouldn't they only need to shut down the few main DNS servers of the internet. Unless you know the actual IP address of all the web pages you visit, you would be out of luck.
permalink · 2004-04-20 15:37:50 · Reply to this

SpitefulCrow
Insert Witty Tag Here
Premium
join:2003-06-04
Berkeley, CA		 Eh, not really, just enough to reset the long-running BGP sessions on most of the major backbones.
permalink · 2004-04-20 15:45:12 · Reply to this
LoungeLizard2

join:2003-11-21
Vallejo, CA

Re: Internet Shutdown

Thanks
permalink · 2004-04-20 15:53:04 · Reply to this

purplejello

join:2001-08-23
Reno, NV
clubs:		 Well, they'd know one end (their own), and they'd know the other end (the major DNS servers).
permalink · 2004-04-20 23:39:03 · Reply to this

tomkb
Premium
join:2000-11-15
Avon, OH
clubs:
·RoadRunner Cable

1 edit
said by laz45 See Profile:
How can this be done, i wanna do it
You have to hold the 'g' key down on your keyboard while booting up. Once you get to the login screen, release the 'g' key, login, and hold the down the 'g' key again until the icons appear on the left side of your screen.

This will effectively shut your portion of the internet down (maybe your whole city block). But you have to have a broadband connection and not dialup because you won't be connected to the internet at first.
permalink · 2004-04-20 15:11:37 · Print · Reply to this

GercekSeytan
Rockin' with Raki
Premium
join:2001-10-19
Turkey
·TTNet

Re: Internet Shutdown

said by tomkb See Profile:
said by laz45 See Profile:
How can this be done, i wanna do it
You have to hold the 'g' key down on your keyboard while booting up. Once you get to the login screen, release the 'g' key, login, and hold the down the 'g' key again until the icons appear on the left side of your screen.

This will effectively shut your portion of the internet down (maybe your whole city block). But you have to have a broadband connection and not dialup because you won't be connected to the internet at first.
Not working for me...need more detailed instructions.
--
Me? Paranoid!? Not at all. Why do you ask?
permalink · 2004-04-21 14:46:49 · Print · Reply to this

wolfox
Gentle Wolfox

join:2002-11-27
Dunnellon, FL
said by laz45 See Profile:
How can this be done, i wanna do it
Does your mommy know that you are playing with her cable provisioned PC?
--
Nothwest Arkansas' ONLY all Techno Radio Webcast, powered by SBC DSL!
permalink · 2004-04-20 15:39:55 · Reply to this

PloKoon
Bumper Sticker Doctrine

join:2002-01-06
Cherry Hill, NJ
said by laz45 See Profile:
How can this be done, i wanna do it
Pssst... go here: »www.turnofftheinternet.com/. Don't tell anyone!!
--
Real change happens when the pain of staying the same becomes greater than the pain of changing.
permalink · 2004-04-20 15:44:36 · Reply to this

maxpower111111

@12.149.x.x		 This is how.
permalink · 2004-04-20 16:15:54 · Reply to this
tdkyo

join:2002-12-07
Rochester, NY		 Lets see if your router manufacturers can come up with a patch soon....
permalink · 2004-04-20 15:09:23 · Reply to this

bky
moof moof
Premium
join:2002-07-05
Austin, TX

Re: Internet Shutdown

I think the article is referring to bigger routers like cisco
permalink · 2004-04-20 15:12:01 · Reply to this

MightWolf

join:2002-06-17
Windsor, ON

Re: Internet Shutdown

Well it's not like a hacker will spend hours tracking a home user's TCP inbound and outbound connections just so he can shut them down.
permalink · 2004-04-20 15:15:07 · Reply to this

HardwareLust
Subaru WRX Maniac
Premium
join:2002-01-02
Harrisburg, PA
clubs:

Re: Internet Shutdown

said by MightWolf See Profile:
Well it's not like a hacker will spend hours tracking a home user's TCP inbound and outbound connections just so he can shut them down.
Depends on how bad you wanna mess with the guy at the other end. There's several people I would love to do this to, but I'm way too lazy.
--
Where the hell are my stars that I worked so hard for???
permalink · 2004-04-20 15:32:09 · Print · Reply to this

garagerock
Premium
join:2002-06-14
Louisville, KY

 Come on.

Unless parties out there are privy to the locations of all of the root servers, I don't see this as a reality.

Is it scary that someone found a way to exploit TCP? Of course it is. But it looks like the gov't geeks are working on it...LOL, we should have a fix for it in about 5 years
permalink · 2004-04-20 15:39:06 · Reply to this

dpocoroba
Premium
join:2000-11-14
224.0.0.5

 Crazy news indeed. BGP resets are far from fast... it takes a few mins or so for less then 100 or so routes. Not to mention core backbone routers hold some 150,000 + internet routes. Major re-convergence time if that was to start happing. Another good reason to use MD5 on all protocols that support it.
--
"Knowledge is contagious, infect"
permalink · 2004-04-20 15:50:07 · Reply to this
clarkism

join:2002-01-27
San Francisco, CA

Re: Internet Shutdown

That would have to be a highly coordinated attack to reset several bgp sessions.

Is MD5 in clear text?
permalink · 2004-04-20 16:01:00 · Reply to this

pcscdma
Chocobo Chocobo Random Battle
Premium
join:2004-01-14
Winterset, IA
clubs:

Re: Internet Shutdown

said by clarkism See Profile:
Is MD5 in clear text?
I sure hope not!
--
The smarter computers get, the more faith I put into Newton's 3rd law.
permalink · 2004-04-20 16:07:56 · Reply to this

dpocoroba
Premium
join:2000-11-14
224.0.0.5

Re: Internet Shutdown

said by pcscdma See Profile:
said by clarkism See Profile:
Is MD5 in clear text?
I sure hope not!
No MD5 isnt anything like PAP, it uses hashes. when you configure it on the cisco router
" nei x.x.x. pass zzzz"

It will show up as encrypted in a "sh run". As someone posted earlier " nei x.x.x.x pass 0 zzzz " if you where to "sh run" with that command it will show the key in clear text since that command says not to encrypted the key.
--
"Knowledge is contagious, infect"
permalink · 2004-04-20 19:21:59 · Print · Reply to this

koitsu
Premium
join:2002-07-16
Mountain View, CA		 Shutting down the Internet would quite possibly be one of the most positive things ever to happen.

Good thing dreams are free, eh?
--
Making life hard for others since 1977.
permalink · 2004-04-20 15:50:21 · Reply to this

hack3d

@cox.net

the mother of all exploits

the title says it all. it doesnt look like a simple ms patch can fix this
permalink · 2004-04-20 15:01:25 · Reply to this

gruggni
Oxygen Gets You High

join:2003-07-28
Corpus Christi, TX
1 edit

Take down the internet

I'm tired of spam and viruses, just kill it already.

Stop those bastards from making money.
People will have to go outside or watch tv.

Use the phone, HAHA voip, suckers.

How much do you depend on tcp/ip?
permalink · 2004-04-20 15:15:02 · Reply to this

See 8 replies to this post

fatmanskinny
Premium
join:2004-01-04
Wandering

Ouch!

Maybe I will get some work out of this. Last time, I got a 2 month computer support contract because of SoBig. No telling how long my contract will be if the WHOLE INTERNET can be shut down and needs patching.
permalink · 2004-04-20 15:16:15 · Reply to this

insomniac
Oh Yeah
Premium
join:2002-09-22
Naperville, IL
clubs:

Re: Ouch!

Good point. I have a part-time job because of Klez.
permalink · 2004-04-21 13:59:52 · Reply to this

brandon
Some truth included in this post.
Premium
join:2003-03-31
Hurley, MS

Dang.

The internet's broken.
permalink · 2004-04-20 15:22:08 · Reply to this

Anon-E-Mus

@rockwellautomation.c

Way to go, Tony!!!

Tony had discovered this vulnerability about a year ago. Luckily it was first discovered by an intelligent and ethical IT security guy and not some unscrupulous hacker. He has quietly worked with vendors during that time helping them come up with a solution.
permalink · 2004-04-20 15:22:43 · Reply to this

jap
Premium
join:2003-08-10
038xx

Re: Way to go, Tony!!!

Agreed.
permalink · 2004-04-20 15:41:24 · Reply to this

technick
Premium
join:2000-12-16
Loganville, GA

Re: Way to go, Tony!!!

I hope Tony makes alot of money off of this. That would be the only way I would be this ethical in a world full of capitalism. Give me money and I won't make your life a living hell.
permalink · 2004-04-20 17:08:38 · Reply to this

jap
Premium
join:2003-08-10
038xx

Re: Way to go, Tony!!!

WHOA .... technick, you be more jaded & cynical than I. You people who are more like me than I am scare the livin' daylights oughta me.
permalink · 2004-04-20 20:03:06 · Reply to this

technick
Premium
join:2000-12-16
Loganville, GA

Re: Way to go, Tony!!!

Well think about it, we live in a very capitalistic society, and if you save goverments, and private industry millions & millions of dollars, should you get a little kick back as well? It makes perfect scense. Nothing in the world is free like it should be. If you can't change the game, beat them at their own game.
--
"Our greatest glory consists not in never falling, but in rising everytime we fall." - Confucius - - - - - - - - - - - Streamfire.net- - AIM - CoNFuCiUsNiCk
permalink · 2004-04-20 22:35:04 · Print · Reply to this

AthlGrond
Premium,MVM
join:2002-04-25
Aurora, CO

Well There Goes Comcast

The center "encourages all BGP enabled Juniper or Cisco router administrators to turn on MD5 checksums as soon as possible while testing the patch supplied by router vendors."

How fast do you think Comcast will do this?
permalink · 2004-04-20 15:31:46 · Reply to this
BosstonesOwn

join:2002-12-15
Everett, MA
clubs:

Re: Well There Goes Comcast

you want a time table with or without a rate hike ?
--
This package does not contain a winner...
permalink · 2004-04-20 16:46:25 · Reply to this
onionsoup

join:2003-02-21
Salem, CT

 Not until it shuts down their entire system and customers begin to complain. Then maybe just maybe they will begin to do something about it, but even then they will give their employees equipment they have not been trained on, and only do a General Custard patch job.

No love here for them sorry.
permalink · 2004-04-20 18:19:14 · Reply to this

Yoda2009

join:2003-10-07
Toronto, ON

No threat?

Something tells me hackers wouldn't want to take down the internet, as that's what they use. Then again if they're stupid enough...
permalink · 2004-04-20 15:32:03 · Reply to this

hack3d

@cox.net

Re: No threat?

and by the sounds of it, it only takes one stupid hacker
permalink · 2004-04-20 15:36:05 · Reply to this

jap
Premium
join:2003-08-10
038xx
·RoadRunner Cable

 I'm not so sure. The primary goal has got to be a sense of power (& a distant second = gaining underground cred). And they know the operational injuries they may inflict will not be lasting but merely send dozens of expensive techs & managers scurrying - a very tempting thing for the enfranchised, low esteem geeks of the world: a real sense of worth, don't ya know, if your labor can affect so much response. It's why I loiter in car traffic: to display my influence on large numbers of harried drivers and passengers where I otherwise have no influence.
permalink · 2004-04-20 15:47:47 · Print · Reply to this
clarkism

join:2002-01-27
San Francisco, CA		 Its not like one can take down the internet.
If someone where to take down an interface or a paticular BGP session, BGP would reroute that traffic.
permalink · 2004-04-20 15:52:50 · Reply to this
tonekilla
Pipe Dreams
Premium
join:2003-07-26
Gunnison, MS
clubs:		 trust me. they would revel in taking down the whole internet.
permalink · 2004-04-20 15:53:52 · Reply to this

footballdude
Premium
join:2002-08-13
Imperial, MO
said by Yoda2009 See Profile:
Something tells me hackers wouldn't want to take down the internet, as that's what they use.
What about terrorists? Their goal is to cause trouble. How much of the upcoming Presidential election will be conducted online?
permalink · 2004-04-20 16:19:10 · Reply to this

sporkme
drop the crantini and move it, sister
Premium,MVM
join:2000-07-01
Morristown, NJ
·Optimum Online

Router people, how to fix

Just got off the phone with one of our upstreams, and it was quite easy to setup. In your bgp config:


neighbor x.x.x.x password 0 somethingsecret


On hitting enter, the bgp session will reset and your router is safe from the attack.

This site has some good general suggestions for using bgp securely:

»www.cymru.com/Documents/secure-b···ate.html

FWIW, the guy I spoke with who was setting up the other end said that this is all they've been doing for the past few days.
--
Thanks for the memories
permalink · 2004-04-20 15:35:16 · Print · Reply to this

TivoNut
Premium
join:2002-04-18
Yorba Linda, CA

Re: Router people, how to fix

said by sporkme See Profile:
Just got off the phone with one of our upstreams, and it was quite easy to setup.
Yes, but how long did it take to get to the right guy?
permalink · 2004-04-20 15:50:24 · Reply to this

sporkme
drop the crantini and move it, sister
Premium,MVM
join:2000-07-01
Morristown, NJ
·Optimum Online

Re: Router people, how to fix

said by TivoNut See Profile:
said by sporkme See Profile:
Just got off the phone with one of our upstreams, and it was quite easy to setup.
Yes, but how long did it take to get to the right guy?
I sent email to noc@ one upstream and got a call back in less than five minutes. I sent email to another (via a reseller) and got a call back in about a half-hour. I didn't have to talk to any 1st-level people. The one that responded a bit later even had a ready-made GUI tool; he hit a button and it generated a random password which he read to me. He hit another button labelled "deploy" and in about 15 seconds my session went up/down. I was quite pleased.
--
Thanks for the memories
permalink · 2004-04-21 13:53:03 · Print · Reply to this

teflon77

@comcast.net

from:
pcscdma See Profile

new protocols now

can you guys see its a conspiracy....
all so we can have a mass exodus to BIC-TCP when the time is right. think about it...
permalink · 2004-04-20 15:38:02 · Reply to this

kba4

join:2001-10-23
Canton, OH

anyone else see a possible flip side

doesn't the US 'department of homeland security' want to 'rewire' the net? wouldn't this be the perfect cover to now make this necessary?
--
BREAKING NEWS: US MISTAKENLY KILLS SELF IN WAR ON TERROR!
permalink · 2004-04-20 15:44:43 · Reply to this

See 7 replies to this post
sunpost

join:2003-11-23
Allentown, PA
clubs:

My theory...

Al Gore put this back door in his internet to sabotage the Republicans :P~~~
permalink · 2004-04-20 15:44:54 · Reply to this

raw
War Eagle
Premium
join:2001-01-17
Madison, AL
clubs:

Re: My theory...

For that to have happened, Al Gore would have first had to have invented the Internet.

Wait...

permalink · 2004-04-20 15:53:54 · Reply to this

pcscdma
Chocobo Chocobo Random Battle
Premium
join:2004-01-14
Winterset, IA
clubs:		 Al Gore didn't invent TCP/IP
permalink · 2004-04-20 16:28:49 · Reply to this

raw
War Eagle
Premium
join:2001-01-17
Madison, AL
clubs:

Re: My theory...

Way to spoil the joke.
permalink · 2004-04-20 16:39:32 · Reply to this
BosstonesOwn

join:2002-12-15
Everett, MA
clubs:
·Comcast

 Look it up on al gores internet. he indeed did create tcp/ip and udp i hear rumours of his hand in bic/tcp also.

What a genius he is. i wish i had invented this internet thingy.
--
This package does not contain a winner...
permalink · 2004-04-20 16:53:59 · Reply to this

wolfox
Gentle Wolfox

join:2002-11-27
Dunnellon, FL

Internet was not made...

[insightful]... to be proof against unscrupulous individuals. It was founded in the spirit of communication, interoperability of all types of computer systems. In effect, an electronic, ethereal utopia. TCP/IP and it's various other protocols that use it as a transport were not meant to be "hardened" or secured.

But it is human nature to poke, prod, exploit and conquer everything in it's path. Greed, superiority, a rotten sex life - all good motivators to push the Internet and TCP/IP to the brink of extinction.

The protocol is not what's flawed here. People are. [/insightful]
--
Nothwest Arkansas' ONLY all Techno Radio Webcast, powered by SBC DSL!
permalink · 2004-04-20 15:49:35 · Print · Reply to this

TheGiant
Next Year Is Here.

join:2001-03-28
Augusta, GA

Re: Internet was not made...

How long has the internet as we know it been around 10 years, 15, 20? IPv4 is all we are up to even AOL is up to ver 9.x Time to upgrade. Didn't I see a news article on something a zillion times faster last week let's go with that.

Everything man makes is flawed.
--
Keep America safe BUSH 2004
permalink · 2004-04-20 16:21:47 · Reply to this

Morac

join:2001-08-30
Riverside, NJ
·Comcast

Not that big a deal

According to this description it looks very simple to to do, but I doubt the home user has much to worry about since all it does is reset the connection. Most TCP connections don't last that long and since it requires knowing the sequence number and receive window size ahead of time it doesn't seem like something a script kiddie could take advantage of. Since it requires a "hands on" touch I doubt anyone will waste their time going after specific home users.

This will mainly affect machines/routers that constantly keep open a large number of TCP connections like those that use BGP. Implementing the ACK number checks and MD5 encryption will make this a lot harder to exploit, which I'm sure is what the higher risk targets have been doing.

In fact according to this guy over on Slashdot that's what they have been doing.
This guy also has some interesting insight into the problem.

A simple work-around to lower your chance of getting hit by this is to change your receive window size, which I'm sure everyone here has already done.
--
"snmp: the standard e-mail protocol on the Internet" - LinkSys user manual (page 17)
permalink · 2004-04-20 16:26:16 · Print · Reply to this
systems2000
What? You Say It's Fixed. Hah

join:2001-11-29
Cyberspace

Re: Not that big a deal

said by Morac See Profile:
...and since it requires knowing the ... receive window size ... it doesn't seem like something a script kiddie could take advantage of.
I think you could find that information by going here »www.web100.org

said by Morac See Profile:
A simple work-around to lower your chance of getting hit by this is to change your receive window size, which I'm sure everyone here has already done.
If evryone uses different RWIN's throughout the Internet, I would think that would defeat the ability to tune transfer rates for performance.

said by Morac See Profile:
"snmp: the standard e-mail protocol on the Internet" - LinkSys user manual (page 17)
FUNNY!! Another reason why I don't use or recommend Linksys products.
--
Personal Theme Song:RUSH - Mystic Rythms from Power Windows.
permalink · 2004-04-22 22:27:10 · Print · Reply to this

Morac

join:2001-08-30
Riverside, NJ
·Comcast

Re: Not that big a deal

said by systems2000 See Profile:
said by Morac See Profile:
...and since it requires knowing the ... receive window size ... it doesn't seem like something a script kiddie could take advantage of.
I think you could find that information by going here »www.web100.org
There is no way to remotely know the receive window size of a machine on the internet without establishing a TCP connecting to that machine. The site you mentioned runs a java program on the machine itself which means the machine has to run the program.

said by systems2000 See Profile:
If evryone uses different RWIN's throughout the Internet, I would think that would defeat the ability to tune transfer rates for performance.
The receive window only affects the size of the receive buffer on your machine so it only affects the transfer rate performance on your machine. It should differ depending on your average ping times and transfer speeds so it can be different for different people. Actually if everyone used the same RWIN then many people would have non-optimized connections. See the RWIN FAQ on this site for more info.
--
"snmp: the standard e-mail protocol on the Internet" - LinkSys user manual (page 17)
permalink · 2004-04-23 10:45:47 · Print · Reply to this
jesseeu

join:2003-07-09
Key West, FL

Great...

I just get my 3mbps upgrade and now they decide to take down the internet.
permalink · 2004-04-20 16:26:17 · Reply to this
bv21

join:2001-02-08
Key West, FL

Re: Great...

Where are you located in Key West?
permalink · 2004-04-21 18:29:14 · Reply to this
jesseeu

join:2003-07-09
Key West, FL

Re: Great...

New Town
permalink · 2004-04-28 16:22:17 · Reply to this

skoivisto
Premium
join:2003-01-06
Mchenry, IL

Whoa

That could be pretty scary in the event that someone gets a hold of that flaw.
permalink · 2004-04-20 16:26:40 · Reply to this

pcscdma
Chocobo Chocobo Random Battle
Premium
join:2004-01-14
Winterset, IA
clubs:

Witty remarks

Keep those witty remarks going! I have used the thumbs up button way too much on this! I like the thumbs up button! Pretty soon the Internet will be down and I will be unable to give anybody thumbs up anymore

Enjoy the last days of the Internet.:)

Peace out
--
The smarter computers get, the more faith I put into Newton's 3rd law.
permalink · 2004-04-20 16:40:32 · Reply to this

Monster Rain
Premium
join:2002-08-03
USA

Turn on MD5

That's the fix
permalink · 2004-04-20 16:41:42 · Reply to this
xrobertcmx
Premium
join:2001-06-18
Sterling, VA
clubs:

Does anyone know the jump off

Point for all the VOIP connections to Indian Tech/Customer Support?
I would like it to go away.
permalink · 2004-04-20 17:38:08 · Reply to this
Formeister

join:2000-10-28
Somers, CT
clubs:

What if..???

Since none of my compuers are bound to the tcp/ip protocol, does this mean I could take over the Intenet when the shi*t hits the fan? Newbies want to know....
permalink · 2004-04-20 19:59:08 · Reply to this

See 6 replies to this post
Forums » Major TCP Vulnerability Unveiledpage: 1 · 2

Sunday, 29-Nov 07:07:18 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.