Re: djbdns/dnscache poisoning weakness

BTW, does anyone know Mark Johnson?  There is no bio, and I can't find
any employment, resume, or even email from before 2007.  From off-list
conversation, he seems to think he knows me pretty well, and has
apparently read some BIND Cartel BS about me.  Is this a sock puppet?  
What's his background? Can anybody vouch for knowing him for a long
time? Offlist.

Inline:

On Tue, 10 Feb 2009, Mark Johnson wrote:

> Please explain how Jeff King's patches make it possible to poison
> dnscache in 1000 messages.   

That's easy. I never said "_Jeff King's_ patches make it possible to
poison dnscache in 1000 messages." I said that about the Day/Kaminsky
proposed changes for the same "vulnerabilities" they just quoted.  
"Vulnerabilities" that they never quite got around to analyzing
mathematically, or even showing that they can be exploited in reasonable
time. I guess they decided not to try math again, after I found their
last math analysis incorrect.


> Without simply referring people to your previous posts / mail / rants
> / whatever.  Nobody aside from you understands how you get from A
> (patches) to B (dnscache can be poisoned in about 1000 messages).  
> Without providing a clear, understandable argument, you're just
> engaging in the same scare tactics you accuse others of.

I have provided an argument, which you're just to lazy to look up.  
Though there may be some important offlist messages that need to be
reported, yet. This is in stark contrast to Day and Kaminsky, who made
unsubstantiated claims in July 2008, that they are just now posting
publicly, some __8_months__ later.  I deserve the same 8 months to
review, update or merely _RE-POST_ my arguments.



> You won't provide such an argument, however, because you're a net.kook
> and a troll.

In fact, I did provide the argument. You're just too lazy to look it up.

> You're not interested in a civil, rational discussion.  You just have
> to be right (even when you're wrong).  Anybody who simply does not
> agree with you or is not convinced by your arguments is a 'threat'.  
> You have to have the last word.  Fine, have it.  I'm done encouraging
> you.  I'm done giving you an audience.  I'm going to let your
> irrational garbage go unanswered. I encourage everybody else on this
> list to do the same.  If we don't feed the kook/troll, he'll go away.  
> Or at least quiet down.

Gee, I notice that this is the same sort of thing that the BIND Cartel
says about me.  Usually before they try to silence me, while hurling
insults and epithets.  So, now they accuse me of 'not being interested
in civil rational discussion'. Ah, the irony of it.

	--Dean


-- 
Av8 Internet   Prepared to pay a premium for better service?
www.av8.net         faster, more reliable, better service
617 344 9000