On Fri, Aug 8, 2008 at 1:49 PM, Jerome Gotangco <[EMAIL PROTECTED]> wrote: > On Fri, Aug 8, 2008 at 1:40 PM, Gabriel H. Mercado <[EMAIL PROTECTED]> wrote: >> is there a specific patch procedure or update lang? > > The patch was issued weeks/months before the full disclosure as > Kaminsky was already working secretly with the vendors/developers. > However, not everyone did that, for example Apple, which just issued > their patch recently. The patch does not fix anything as this is a > design flaw of DNS itself, but rather makes it harder for someone to > take advantage of the flaw.
I find it amusing that djb from qmail fame had been going on for years that DNS needed source port randomization and put it in djbdns. Made me respect him a bit more as a hacker. _________________________________________________ Philippine Linux Users' Group (PLUG) Mailing List http://lists.linux.org.ph/mailman/listinfo/plug Searchable Archives: http://archives.free.net.ph
