nanog mailing list archives

Re: Kiss-o'-death packets?


From: "E.B. Dreger" <eddy+public+spam () noc everquick net>
Date: Mon, 6 Oct 2003 14:13:03 +0000 (GMT)


PG> Date: Mon, 6 Oct 2003 11:45:11 +0100
PG> From: Peter Galbavy


PG> "Yes but"... there is a strong likelyhood that less paranoid
PG> protocol implementors (not necessarily designers, just those
PG> coding stuff from spec) could simplify their lives and not
PG> check all the right conditions required to filter unwanted
PG> stuff. Bye bye farm.
PG>
PG> Oh, this has happened already ? Now, where is that "Windows
PG> Update" icon again ...

HTTP implementations have had vulnerabilities due to insufficient
checking.  Thus HTTP is a bad idea.

SMTP implementations have had vulnerabilities due to insufficient
checking.  Thus SMTP is a bad idea.

SNMP implementations have had vulnerabilities due to insufficient
checking.  Thus SNMP is a bad idea.

Come to think of it, IP stacks have had vulnerabilities due to
insufficient checking.  IP is a bad idea, too.


Eddy
--
Brotsman & Dreger, Inc. - EverQuick Internet Division
Bandwidth, consulting, e-commerce, hosting, and network building
Phone: +1 785 865 5885 Lawrence and [inter]national
Phone: +1 316 794 8922 Wichita
_________________________________________________________________
          DO NOT send mail to the following addresses :
  blacklist () brics com -or- alfra () intc net -or- curbjmp () intc net
Sending mail to spambait addresses is a great way to get blocked.


Current thread: