Re: [Full-disclosure] Port Randomization: New revision of our IETF Internet-Draft

2008-09-06 Thread Fernando Gont
At 07:39 p.m. 03/09/2008, Jerome Benoit wrote: We have published a revision of our IETF Internet-Draft about port randomization. It is available at: http://www.gont.com.ar/drafts/port-randomization/draft-ietf-tsvwg-port-rand omization-02.txt (you can find the document in other fancy

Re: [Full-disclosure] Port Randomization: New revision of our IETF Internet-Draft

2008-09-03 Thread Jerome Benoit
Le Mon, 01 Sep 2008 02:44:35 -0300, Fernando Gont [EMAIL PROTECTED] a osé(e) écrire : -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Folks, We have published a revision of our IETF Internet-Draft about port randomization. It is available at:

Re: [Full-disclosure] Port Randomization: New revision of our IETF Internet-Draft

2008-09-02 Thread Fernando Gont
At 04:50 p.m. 01/09/2008, coderman wrote: On Sun, Aug 31, 2008 at 10:44 PM, Fernando Gont [EMAIL PROTECTED] wrote: ... IETF Internet-Draft about port randomization... wget -qO - http://www.gont.com.ar/drafts/port-randomization/draft-ietf-tsvwg-port-randomization-02.txt | grep -i grsec is

Re: [Full-disclosure] Port Randomization: New revision of our IETF Internet-Draft

2008-09-02 Thread Pavel Labushev
[EMAIL PROTECTED] ?: On Mon, 01 Sep 2008 15:51:35 CDT, rholgstad said: Linus doesn't care about security No, he actually *does* care about security - he's just pf the opinion that security fixes don't automatically rate a 'ZOMG! PWNED!' flag on them like certain *BSD variants think. He

Re: [Full-disclosure] Port Randomization: New revision of our IETF Internet-Draft

2008-09-02 Thread coderman
On Tue, Sep 2, 2008 at 2:06 AM, Fernando Gont [EMAIL PROTECTED] wrote: ... there's no description of what Windows does some things speak for themselves... :) Also, the base Linux system already implements Algorithm #3... why ... patch if you seed/key #3 poorly, as just one example. (which

Re: [Full-disclosure] Port Randomization: New revision of our IETF Internet-Draft

2008-09-02 Thread Valdis . Kletnieks
On Tue, 02 Sep 2008 17:17:43 +0800, Pavel Labushev said: SECURITY PATCH tag on a fix helps me to know that there is the problem and I must consider the patch, check its correctness and maybe test/backport/apply it to my production systems ASAP. Just as another tags helps me to know that

Re: [Full-disclosure] Port Randomization: New revision of our IETF Internet-Draft

2008-09-02 Thread Pavel Labushev
[EMAIL PROTECTED] ?: On Tue, 02 Sep 2008 17:17:43 +0800, Pavel Labushev said: SECURITY PATCH tag on a fix helps me to know that there is the problem and I must consider the patch, check its correctness and maybe test/backport/apply it to my production systems ASAP. Just as another

Re: [Full-disclosure] Port Randomization: New revision of our IETF Internet-Draft

2008-09-02 Thread Fernando Gont
At 11:15 a.m. 02/09/2008, coderman wrote: On Tue, Sep 2, 2008 at 2:06 AM, Fernando Gont [EMAIL PROTECTED] wrote: ... there's no description of what Windows does some things speak for themselves... :) What speaks for itself? Our work is a proposal for a few alternatives for doing port

Re: [Full-disclosure] Port Randomization: New revision of our IETF Internet-Draft

2008-09-01 Thread coderman
On Sun, Aug 31, 2008 at 10:44 PM, Fernando Gont [EMAIL PROTECTED] wrote: ... IETF Internet-Draft about port randomization... wget -qO - http://www.gont.com.ar/drafts/port-randomization/draft-ietf-tsvwg-port-randomization-02.txt | grep -i grsec is still empty. why do you dismiss grsec?

Re: [Full-disclosure] Port Randomization: New revision of our IETF Internet-Draft

2008-09-01 Thread rholgstad
Linus doesn't care about security [EMAIL PROTECTED] wrote: Or you can get Linus to merge the code in question. See the the helpful info in the file Documentation/SubmittingPatches. You want to send them to the [EMAIL PROTECTED] list for review, that's where the network developers hang out.

Re: [Full-disclosure] Port Randomization: New revision of our IETF Internet-Draft

2008-09-01 Thread Valdis . Kletnieks
On Mon, 01 Sep 2008 15:51:35 CDT, rholgstad said: Linus doesn't care about security No, he actually *does* care about security - he's just pf the opinion that security fixes don't automatically rate a 'ZOMG! PWNED!' flag on them like certain *BSD variants think. He thinks that sticking a big

[Full-disclosure] Port Randomization: New revision of our IETF Internet-Draft

2008-08-31 Thread Fernando Gont
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Folks, We have published a revision of our IETF Internet-Draft about port randomization. It is available at: http://www.gont.com.ar/drafts/port-randomization/draft-ietf-tsvwg-port-rand omization-02.txt (you can find the document in other fancy

[Full-disclosure] Port Randomization: New revision of our IETF Internet-Draft

2008-08-31 Thread Fernando Gont
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Folks, We have published a revision of our IETF Internet-Draft about port randomization. It is available at: http://www.gont.com.ar/drafts/port-randomization/draft-ietf-tsvwg-port-rand omization-02.txt (you can find the document in other fancy