Re: okay already

All of the links cited below by Loftis are known to be BS, and have been
previously exposed as fraudulent false claims.  Loftis himself has been
exposed as being a former MAPS employee with no genuine interest or
particular knowledge of DNS or DJB DNS.

There is no point in rehashing the discussion of the last month or so,
which was itself a rehash of prior discussion debunking and exposing as
fraudulent the claims of Day, Kaminsky, and King.


		--Dean





On Tue, 23 Mar 2010, Michael Loftis wrote:

> 
> 
> --On Tuesday, March 23, 2010 10:10 PM +0000 Chris Pugh 
> <[email protected]> wrote:
> 
> >> My analysis has been reposted several times. There has been no credible
> >> dispute of the math I have posted and none by Loftis.  Loftis' last
> >> frivolous dispute was over Kaminsky's discredited "roulette logic"
> >> claims. Loftis was "confused" about who wrote them. Or perhaps Loftis
> >> was just dissembling and lying to create confusion.
> >
> > Sigh...  A straight link to the actual 'math' as calculated by the
> > various protagonists in this dispute, along with it's actual context,
> > would have done!
> >
> 
> The math for the rapid poisoning in DJBDNS is contained in 
> <http://www.your.org/dnscache/djbdns.pdf> -- the general 
> attack/vulnerability is probably best documented in 
> <http://www.kb.cert.org/vuls/id/457875> -- that contains many references. 
> Kaminsky's technique seems to be very well described by 
> <http://www.unixwiz.net/techtips/iguide-kaminsky-dns-vuln.html>
> 
> Dan Kaminsky's blog at doxpara.com is apparently down right now so I can't 
> dig up/verify any links to his site but all but the (older US CERT VU# 
> 457875) link to his site.  Kaminsky, discovered a new, quicker way of 
> running the birthday attack.
> 
> <http://www.your.org/dnscache/> contains other information from Day.
> 
> 

-- 
Av8 Internet   Prepared to pay a premium for better service?
www.av8.net         faster, more reliable, better service
617 256 5494