SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Politics : Formerly About Applied Materials
AMAT 304.84-0.8%Jan 13 3:59 PM EST

 Public ReplyPrvt ReplyMark as Last ReadFilePrevious 10Next 10PreviousNext  
To: FJB who wrote (47912)6/13/2001 11:35:07 PM
From: Math Junkie  Read Replies (2) of 70976
 
OT

Re: I think that something that is so obvious will quickly have a solution created for it.

So far Microsoft has declined to do so. After XP is widely distributed, it will be too late. Any fix would have to be installed on the hacker's machine, and I don't see how they could be forced to install and use it.

There are a lot of Win2000 machines out there in full service. You would think that all these anti-Microsoft people would be putting them out of commission whenever they please.

The issue Gibson is raising is not Win 2000 or Win XP machines being put out of commission, but rather their ability to originate spoofed addresses. This is clear from the following excerpt from a hypothetical situation he poses:

"...A couple of the school's more knowledgeable young computer geeks explain that Windows XP is really cool because, unlike the earlier versions of Windows, XP lets you "Spoof" your computer's IP address to make you completely anonymous and invisible when attacking others on the Internet..."

Re: As far as spoofing goes, you and I both have digital signatures that can not be spoofed. The IP address becomes irrelevant.

It is clear from what he has written that the issue in his mind is not impersonation, but that XP would enable potentially large numbers of novice hackers to achieve anonymity while launching attacks, thus dramatically escalating an already growing problem. I don't see where digital signatures would address this.

Instead of my reading the article to you, why don't you read it yourself before you try to dismiss it?
Report TOU ViolationShare This Post
 Public ReplyPrvt ReplyMark as Last ReadFilePrevious 10Next 10PreviousNext