Re: squirting spray foam into the crack at the bottom of the BAW

>>> There is no way that the "birthday attack window" can be closed,

Strictl speaking you could use raw sockets to simulate listening on
all udp ports at once,
monitor these ports for repetive answers which don't match any
currently in flight query,
and go into a defensive mode when we trigger on more than 100 (or
whatever) bad responses in a particular period of time, at which point
we start double or triple issuing queries, not considering the answers
valid until we receive two or three identical answers.  I don't feel
like doing the math, but at a rough estimate this would make the
attack infeasible in practice.

As the number of bad (bad meaning unrequested, no match between
src/dst udp port and whatever other fields we can match on inside the
packet) packets per second increases, we can switch from single query
mode to progressively higher amount of repetitive queries.