Re: djbdns/dnscache poisoning weakness

On Tue, Feb 10, 2009 at 5:01 PM, Dean Anderson <[email protected]> wrote:
> Not exactly. There is only one set of authentic facts, and the facts
> support my analysis.

You want facts?  Okay.  You said:

>I recommend ignoring these patches and avoiding any server that uses
>these patches.
...
> When the 'DNS cache scare' started last summer, Kaminsky tried to get
> people to convert to David Ulevitch's OpenDNS service. The scare also
> prompted efforts to promote DNSSEC.  These are "scare" scams, not
> legitimate threats for which people should change DNS software.
...
>Previous analysis of the Kevin Day/Dan Kaminsky proposed changes to
>DNSCACHE revealed that they would ADD EXTREME WEAKNESS not fix weakness,
>making it possible to poison a cache in about 1000 messages. I have not
>yet analyzed the BIND changes, and do not know if they suffer the same
>weaknesses as the DNSCACHE changes.

I said:

> Pot.  Kettle.  Black.  You're engaging in the same kind of scare
> tactics that you accuse Kevin of.

Please explain how Jeff King's patches make it possible to poison
dnscache in 1000 messages.   Without simply referring people to your
previous posts / mail / rants / whatever.  Nobody aside from you
understands how you get from A (patches) to B (dnscache can be
poisoned in about 1000 messages).  Without providing a clear,
understandable argument, you're just engaging in the same scare
tactics you accuse others of. You won't provide such an argument,
however, because you're a net.kook and a troll.  You're not interested
in a civil, rational discussion.  You just have to be right (even when
you're wrong).  Anybody who simply does not agree with you or is not
convinced by your arguments is a 'threat'.  You have to have the last
word.  Fine, have it.  I'm done encouraging you.  I'm done giving you
an audience.  I'm going to let your irrational garbage go unanswered.
I encourage everybody else on this list to do the same.  If we don't
feed the kook/troll, he'll go away.  Or at least quiet down.