Re: [Full-disclosure] TCP Port randomization paper

2008-08-27 Thread Fernando Gont
At 02:20 a.m. 09/12/2007, reepex wrote: holy shit batman! ~$ grep -i grsec draft-ietf-tsvwg-port-randomization-00.txt ~$ as stated by the last person its very strange you do not mention grsecurity in your "Survey of the algorithms in use by some popular implementations" Can anybody please

Re: [Full-disclosure] TCP Port randomization paper

2007-12-11 Thread Fernando Gont
On Dec 9, 2007 2:20 AM, reepex <[EMAIL PROTECTED]> wrote: > ~$ grep -i grsec draft-ietf-tsvwg-port-randomization-00.txt > ~$ > > as stated by the last person its very strange you do not mention grsecurity > in your > "Survey of the algorithms in use by some popular implementations" Well, it's jus

Re: [Full-disclosure] TCP Port randomization paper

2007-12-08 Thread reepex
holy shit batman! ~$ grep -i grsec draft-ietf-tsvwg-port-randomization-00.txt ~$ as stated by the last person its very strange you do not mention grsecurity in your "Survey of the algorithms in use by some popular implementations" Are you a developer of selinux or a close friend/relative/lover

Re: [Full-disclosure] TCP Port randomization paper

2007-12-07 Thread Fernando Gont
Vladimir, Our draft discusses many port randomization approaches. Some of them were taken from existing implementations (e.g., Algorithm 1 was taken from OpenBSD). However, Algorithm 3 was first described (AFAICT) in Michael Larsen's "port randomization" paper (the first version of our port rando

Re: [Full-disclosure] TCP Port randomization paper

2007-12-06 Thread Vladimir Vitkov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Strangely enough this stuff exists for more than 3 years ... Think GRSEC and more specifically Network stack randomization. Well of course bow to IETF for accepting this for draft ... Fernando Gont wrote: > Folks, > > We have published a revision of

[Full-disclosure] TCP Port randomization paper

2007-12-06 Thread Fernando Gont
Folks, We have published a revision of our port randomization paper. This is the first revision of the document since it was accepted as a working group item of the tsvwg working group of the IETF (Internet Engineering Task Force). Any feedback on the proposed/described algorithms will be welc