ons, 2002-04-24 kl. 14:35 skrev [EMAIL PROTECTED]:

> No, I *think* he meant post XP that it could have used UDP.

Let's wind this thing back a couple of messages.

Gibson's argument was that ICMP echo requests on raw (Unix) sockets were
not possible with Windows 98 and below, since raw sockets weren't
implemented on these OSs. So Microsoft fudged ICMP requests with (either
UDP or) TCP. In as much as you have to be root to use raw sockets (try a
ping on, for example, a BSD machine without being root), introducing the
concept of raw sockets in XP constituted a security risk. There was an
extremely long article about this about a year ago, but it's now
disappeared.

An example of a non-root Unix user wanting to ping, is that he uses
hping2, which uses UDP/TCP fudges.

This is neither an anti-Gibson nor an anti-OS posting. What it is, is an
attempt to clarify iptables rules.

I'm a Unix security bod in the widest sense of the word and very
interested in all security aspects. This is merely one, but it would be
nice to get it cleared up.

> http://www.grc.com/

That was the one, yes. Just grc.com works too.

Tony

-- 

Tony Earnshaw

e-post:         [EMAIL PROTECTED]
www:            http://www.billy.demon.nl
gpg public key: http://www.billy.demon.nl/tonni.armor

Telefoon:       (+31) (0)172 530428
Mobiel:         (+31) (0)6 51153356

GPG Fingerprint = 3924 6BF8 A755 DE1A 4AD6 FA2B F7D7 6051 3BE7 B981
3BE7B981


Attachment: signature.asc
Description: Dette er en digitalt signert meldingsdel

Reply via email to