Tracking Internet Computers

2005-03-04 Thread Jim Kuzdrall
Greetings, An article today on CNET says A doctoral student at the University of California has conclusively fingerprinted computer hardware remotely, allowing it to be tracked wherever it is on the Internet. http://www.zdnet.com.au/news/security/0,261744,39183346,00.htm The

Re: Tracking Internet Computers

2005-03-04 Thread Jason Stephenson
That sounds interesting, but I wonder if regularly setting your computer's clock via ntpd or ntpdate would defeat this. Having a sysctl MIB to turn off the TCP timestamping would certainly defeat this. I'll wager that if such doesn't already exist in the various BSD and Linux kernels, it will

Re: Tracking Internet Computers

2005-03-04 Thread Jason Stephenson
Just answered my own question. On FreeBSD, there is a sysctl MIB to activate or deactivate RFC 1323 timestamping: net.inet.tcp.rfc1323 Setting it to 1, the default, turns it on, setting it to 0, turns it off. Looking at my OpenBSD machine, I see the same sysctl MIB as FreeBSD. Finally, checking