Re: okay already
Sebastian Andersson <[email protected]> Thu, 25 Mar 2010 08:27:22 +0100
| Newsgroups | gmane.network.djbdns |
|---|---|
| Message-ID | <[email protected]> |
On Wed, Mar 24, 2010 at 01:04:42PM -0600, Michael Loftis wrote: > Unpatched DJBDNS, because it will send out many queries for the same data, > is somewhere around 200x more likely to fall prey to cache poisoning. No > nefarious smoke and mirrors, nothing of the sort. It's been very clearly > explained, the math was checked by real statisticians before and after the > fact and found to be sound. There's no way to precisely measure these > things, but they certainly can be estimated, in a number of ways. Can't one simply run metasploit's DNS poisoning module against djbdns (on a lan to speed up the results) before and after the patch is applied and measure the time differences? /Sebastian -- So it doesn't mess up the flow of .oooO o,o Oooo. (o_ reading. ( ) \_/ ( ) (o_ //\ > How come? \ ( /|\ ) / (/)_ V_/_ > > I prefer to reply inline. \_) (_/ http://dum.acc.umu.se/