Re: okay already

--On Tuesday, March 23, 2010 10:10 PM +0000 Chris Pugh 
<[email protected]> wrote:

>> My analysis has been reposted several times. There has been no credible
>> dispute of the math I have posted and none by Loftis.  Loftis' last
>> frivolous dispute was over Kaminsky's discredited "roulette logic"
>> claims. Loftis was "confused" about who wrote them. Or perhaps Loftis
>> was just dissembling and lying to create confusion.
>
> Sigh...  A straight link to the actual 'math' as calculated by the
> various protagonists in this dispute, along with it's actual context,
> would have done!
>

The math for the rapid poisoning in DJBDNS is contained in 
<http://www.your.org/dnscache/djbdns.pdf> -- the general 
attack/vulnerability is probably best documented in 
<http://www.kb.cert.org/vuls/id/457875> -- that contains many references. 
Kaminsky's technique seems to be very well described by 
<http://www.unixwiz.net/techtips/iguide-kaminsky-dns-vuln.html>

Dan Kaminsky's blog at doxpara.com is apparently down right now so I can't 
dig up/verify any links to his site but all but the (older US CERT VU# 
457875) link to his site.  Kaminsky, discovered a new, quicker way of 
running the birthday attack.

<http://www.your.org/dnscache/> contains other information from Day.