Re: okay already

Sebastian Andersson <[email protected]> Thu, 25 Mar 2010 08:27:22 +0100
Newsgroups gmane.network.djbdns
Message-ID <[email protected]>
On Wed, Mar 24, 2010 at 01:04:42PM -0600, Michael Loftis wrote:
> Unpatched DJBDNS, because it will send out many queries for the same data, 
> is somewhere around 200x more likely to fall prey to cache poisoning.  No 
> nefarious smoke and mirrors, nothing of the sort.  It's been very clearly 
> explained, the math was checked by real statisticians before and after the 
> fact and found to be sound.  There's no way to precisely measure these 
> things, but they certainly can be estimated, in a number of ways.

Can't one simply run metasploit's DNS poisoning module against djbdns
(on a lan to speed up the results) before and after the patch is applied
and measure the time differences?

/Sebastian
-- 
So it doesn't mess up the flow of .oooO o,o Oooo.        (o_
reading.                          (   ) \_/ (   )  (o_   //\
> How come?                        \ (  /|\  ) /   (/)_  V_/_
> > I prefer to reply inline.       \_)     (_/ http://dum.acc.umu.se/