7 Feb
2001
7 Feb
'01
11:56 p.m.
Coincidentally, or perhaps not given my recent comments about the dumbness of tracing and blocking as a strategy, someone appears to be syn flooding my cable modem right now. Tons of TCP connections from a bank of IP addresses slowly changing. Adam Adam Shostack wrote:
Folks should take a look at the work Bindview did on the Naptha family if dos attacks. Basicly, they found ways to move up the application stack, consuming CPU, without a serious comitment of resources on the client side. razor.bindview.com/publish/advisories/adv_NAPTHA.html