Re: [tcpm] PoC for draft-moncaster-tcpm-rcv-cheat-02

Stefanos,

I'd tend to agree with ROb - publication is unlikely to get the 
solution out there any quicker.

If you're willing, you can always make the code available but require 
the downloader to contact you personally for a copy. Not ideal, but a 
decent compromise.

BOb

At 04:25 26/03/2008, Rob Sherwood wrote:
>On Wed, Mar 26, 2008 at 12:29:33AM +0200, Stefanos Harhalakis wrote:
> > Hello there,
> >
> > While experimenting I've written a (small) python program that 
> utilizes the
> > TCP weakness that is addressed in 
> draft-moncaster-tcpm-rcv-cheat-02 (which I
> > discovered latter). Using it, I was able to make an (under my 
> control) HTTP
> > server generate a constant 5-minute (until I interrupted it) 
> 900Mbps traffic
> > over the Internet using just a DSL line. Theoretically it could 
> also be done
> > using a 64Kbps ISDN line, it is 100% reproduceable and it can be 
> used on many
> > web servers with fast internet connections.
> >
> > I'm considering wether I should make this (small) tool public or not.
>
>As a data point, I have choosen not to publish the PoC code I created
>for this attack ("TCP Receivers Can Cause Internet-Wide Congestion
>Collapse" CCS 2005).  While I am a strong proponent of full disclosure,
>I don't think releasing the code will speed the acceptance of the
>proposed solution.
>
>- Rob
>.
>_______________________________________________
>tcpm mailing list
>tcpm@ietf.org
>https://www.ietf.org/mailman/listinfo/tcpm

____________________________________________________________________________
Bob Briscoe, <bob.briscoe@bt.com>      Networks Research Centre, BT Research
B54/77 Adastral Park,Martlesham Heath,Ipswich,IP5 3RE,UK.    +44 1473 645196 

_______________________________________________
tcpm mailing list
tcpm@ietf.org
https://www.ietf.org/mailman/listinfo/tcpm