Re: Dishonest Forks? | Was - Re: [Namedroppers-honest] Brian Smith asks: Who is Dean Anderson?

On Wed, 10 Mar 2010, Kevin wrote:

> 
> On Mar 9, 2010, at 5:49 PM, Dean Anderson wrote:
> 
> > The fork offered by "Mark Johnson" via sourceforge, called zinq
> > 
> > Emails and other efforts at identifying "Mark Johnson"  
> > [email protected], only lead to an email address, and no emails before
> > a couple years ago. No other "Mark Johnson" participated in qmail,
> > djbdns or any other DNS or email list that I could find.  "Mark Johnson" 
> > appears to be a sockpuppet, possibly operated by one or all of Dempsky, 
> > Day, Kaminsky or their associates. 
> > 
> > The fork contains changes originated by Kevin Day and Dan Kaminsky, 
> > which change the way that DJBDNS handles random ports. The initial 
> > proposal sent to me by Day seriously weakened DJBDNS to birthday attacks 
> > and cache poisoning. The changes distributed by "Mark Johnson" are a 
> > variant of these changes.
> > 
> 
> Dean, this really needs to stop.
> 
> For those of you who weren't present for the beginning of this from a year ago:
> 
> * I discoverd that dnscache is more susceptible to a certain kind of
> cache poisoning than BIND and other resolvers. I have never claimed
> this is undiscovered by anyone else, but rather unknown to most
> dnscache USERS, and that a simple patch would make this poisoning much
> more difficult with no down sides.
> 
> * I gave you an advance copy of my findings, my direct phone number,
> and offer to discuss the matter with you before it is made public. You
> said you were too busy.

As usual, Day's account is completely dishonest. In fact, we engaged in
a series of on-list and off-list emails, in which I discredited Day's
"discovery" and proposed changes as enabling a birthday attack.

I guess I'll have to publish a page with all the emails.

		--Dean

-- 
Av8 Internet   Prepared to pay a premium for better service?
www.av8.net         faster, more reliable, better service
617 256 5494