"Denial of Service attacks arenât new, yet they persist in being effective methods of denying access to resources on the Internet. Now meet Sockstress, the newest version of DoS attacks and potentially the most devastating of the bunch."
Post a Comment
Member since:
2006-07-14
Fydoor was explaining the typical DOS attack. Nothing really new with that. He also explained the different ways to selectively target resources to bring down the machine. I don't think that's particularly new either. As they haven't published details, its difficult to tell what, if anything, makes it distinct.
Member since:2005-08-18
Member since:2008-10-08
It's actually very serious. What makes it new is that it's easy to do and does not take much resources to accomplish the DoS attack. It is basically a way to get around the problem syn cookies was supposed to fix. If you want to learn more about it I suggest listening to episode #164 of Security Now. http://www.grc.com/securitynow.htm
Member since:2005-08-18
Member since:2005-07-08
Member since:
2007-05-12
This sounds like such a simply-structured attack that I wouldn't mind betting that OpenBSD took care of this about five years ago.
Given that apparently all that is required to foil it is to block the offending IP address, pf would look at an "attack" like this and say "come on now, gimme something hard to do...." 
Member since:
2007-04-23