We really don't see an immense growth in packeting on the horizon.Ĭompletely misses the point of the unfilterability of IP packets with spoofed and variable IP addresses, by the victim's ISP (not the source ISP). Raw sockets in 'XP only marginally improve the situation for a malicious party. True, the boxes will eventually be found because their IPs are traceable, and admins will contact the owners and let them know they're infected - but only long after the damage is done. None of that is an issue.ġ) There are thousands of Windows machines left running 24x7 on broadband networks (primarily and RoadRunner) by clueless owners who have made no attempt at securing them.
Yes, DDoS attacks can now be launched from Win95 machines subverted by SubSeven trojans or IRC 'bots. Certainly it can be added to existing versions of Windows. Of course all unix and unix-like machines already have this capability. There is one reason, and one reason only, that he believes the raw-socket capability in WinXP is going to lead to chaos - its use in zombie machines for DDoS attacks and the inability of ISPs to effectively filter out packets with spoofed IP addresses at the target router. While I don't want to come across as strident, you don't seem to have read the "thousands of words on his Web site" you mention Steve Gibson as having written. Thank God someone's finally exposing this charlatan You both make good points, but we're still leaning in Steve's direction
0 kommentar(er)
