On Dec 6, 2007 11:15 PM, Vladimir Vitkov <[EMAIL PROTECTED]> wrote: > ... > Strangely enough this stuff exists for more than 3 years ... Think GRSEC > and more specifically Network stack randomization.
... and high throughput hardware entropy sources. (aka, /dev/urandom fun, seeding at boot, and /dev/random sucked dry) [ok, true entropy is overkill for port/isn selection when a secure prng (yarrow?) will suffice. but if you've got 100M/bps[0] on tap, why not spray freely over ephemeral port numbers and initial sequences...] best regards, 0. http://www.via.com.tw/en/initiatives/padlock/hardware.jsp VIA PadLock Security Engine (i'll leave the fun of coding a high throughput entropy daemon for /dev/random to the reader. unless you happen to have a copy of mtrngd laying around...) _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
