CircleID

Comments

Possible First Attacks on DNS Flaw Have Been Reported

• Comment posted Jul 30, 2008 4:44 am PDT — by Alan U. Kennington
  I stated above that cache queries from the outside Internet would only be a danger for a DNS server which allows recursion from the outside Internet. In BIND configuration files, the set of subnets which are permitted to request such…

• Comment posted Jul 30, 2008 4:13 am PDT — by Alan U. Kennington
  Richard, That std dev 4018 seems very low to me. By my calculations, the std dev should be sqrt((N^2 - 1)/12) for a uniform distribution with N values, which is almost exactly N/(2sqrt(3)). For 64,000 UDP source ports, you should…

• Comment posted Jul 29, 2008 4:21 pm PDT — by Alan U. Kennington
  The packet log which is reported by Kosin is of the exact same type that I have been seeing since July 14, more than a week before the publication of full details of the DNS vulnerability. I have seen 227…

Shouting 'Bug' on a Crowded Internet...

• Comment posted Jul 23, 2008 3:06 pm PDT — by Alan U. Kennington
  I don't want to wind this out into a long thread, but perhaps I could venture a few points which I do think are particular to the recent DNS protocol vulnerability. These "morals" of the story can be communicated to…

• Comment posted Jul 23, 2008 9:45 am PDT — by Alan U. Kennington
  Bill's piece dumbs down the issue just a bit too far. When presenting tech to the general public (as I've heard Bill do for many, many years), there is a constant danger of over-using metaphors and avoiding explaining the special…

Not a Guessing Game

• Comment posted Jul 17, 2008 2:56 pm PDT — by Alan U. Kennington
  Since July 9, I've been trying to get clarity from many people on this question, and have tried to infer the facts from the publicly available information. But after more than 8 days, I just really have to ask this…

• Comment posted Jul 16, 2008 5:34 am PDT — by Alan U. Kennington
  Carl, Standard deviation is a measure of variation of a set of numbers which has nothing at all to do with the normal distribution. All distributions have a standard deviation. The normal distribution is just one among an infinite number…

• Comment posted Jul 15, 2008 8:40 pm PDT — by Alan U. Kennington
  I am not an expert, but.... I tried the dig test a few times and got the opposite to the truth sometimes. Case 1. I ran dig @patched.dns.server porttest.dns-oarc.net in txt and got POOR. It turned out that my patched…