Re: AMNESIA:33 and FreeBSD TCP/IP stack involvement

2020-12-29 Thread Kurt Buff, GSEC/GCIH/PCIP
Recently seen: https://treck.com/vulnerability-response-information/ and https://github.com/Forescout/project-memoria-detector HTH, Kurt On Tue, Dec 8, 2020 at 10:59 PM Hartmann, O. wrote: > > Hello, > I've got a question about recently discovered serious vulnerabilities > in certain TCP stack

Re: Logging TCP anomalies

2015-04-28 Thread Kurt Buff
Snort (and brethren) at the perimeter seem like a reasonable approach. http://seclists.org/snort/2015/q2/114 But, more likely to succeed will be SSL everywhere, and certificate pinning, since this is primarily a web-based attack: http://www.wired.com/2015/04/researchers-uncover-method-detect-nsa-q

Re: How to take down a system to the point of requiring a newfs with one line of C (userland)

2008-02-18 Thread Kurt Buff
Patient: Doctor, it hurts when I do this! Doctor: Don't do that... On Feb 18, 2008 1:23 PM, Dag-Erling Smørgrav <[EMAIL PROTECTED]> wrote: > Jim Bryant <[EMAIL PROTECTED]> writes: > > #include > > #include > > > > int main(int argc, char **argv) { int i; char buf[1024]; bzero(buf, 1024); > > f